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ABSTRACT 


This thesis is concerned with the problem of 
minimal tests to detect stuck-at-0 and stuck-at-1l faults 
in combinational networks. A procedure that generates a 
Minimal single fault test set for any irredundant network 
is given. Fault masking is studied and a method is provided 
COuLInNG»multiple faults that are not detected by a west set 
Porectng le wlaulltSceweeculLticient conditions for multiple 
fault detection are derived and procedures to obtain both 
a Minimal and a nearly minimal multiple fault test. set are 
described. The problem of faults in redundant networks is 
examined and it is shown how to obtain an optimal test set 
for multiple fault detection. A lower and an upper bound 
on the number of tests required to detect all single faults 
in an irredundant network is given. Finally, the problem 
of fault diagnosis is briefly examined and methods for 


obtaining the diagnostic test set are proposed. 
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Chapter 1 


INTRODUCTION 


This thesis deals with the problem of tests for 
detecting and locating faults in combinational networks. 
To ensure the correct operation of a digital system, 
the system must be tested periodically. If a failure 
is detected, the faulty component must be identified and 
replaced. The widening use of digital circuits together 
with the increased complexity of the hardware being built 
have emphasized the need for efficient testing procedures. 
The necessity to protect the system against failures is 
particularly strong with computers operating ina real-time 
environment. Although fault masking and different types 
of redundancy schemes can be used to combat failures, these 
techniques do not eliminate the need of efficient testing 
procedures since they are only capable of prolonging ythe 


time interval between testing. 
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1.1 Assumptions and Definitions 


The faults considered herein are faults that 
produce a change in the logical behaviour Create circu. 
Suchmlog lca caules, Can) be either permanent or IncermicLcenc 
(i.e. transient). Although intermittent faults are 
important, only permanent faults will be dealt with. Very 
little has been said with respect to designing tests for 
transient faults since such faults may disappear by the 
time a test is applied. 

Most permanent faults in logical Cimcults scaly De 
represented [32] by an input or the output of some gate being 
stuck-at-1 (denoted s-l) or stuck-at-0 (s-0). A single 
fault occurs when only one connection in the network is 
s-0 or s-l- A’multiple fault consists of two or more single 
faults occuring simultaneously. A test for a Dabercu lar 
fault is an input combination such that the output Otmene 
correct network is 1 and the output in the presence Otmtene 
fault is 0, or vice versa. A test set is va. set. Of soneroL 
more tests. A test set that detects all faults eve Bl keehtceia 
type is said to be a complete test set. Since a test set 
that is not complete is of little use, TEESE (Seta wile ve 
used to denote a "complete test set" unless otherwise stated. 
For any combinational network the set of all possible 
input combinations represents a trivial example of a test 


set which is complete. Because of its Size such a test set 
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comoOullveusedstom Very Simple circuits. ~The length orra 
test set is the number of tests in the set. A complete 
testesete) Lor a given combinational network. is said to be 
a Minimal test set if there does not exist a test set T' 
SsuchUthat tie Length of T' LS esimallér than the length of T. 

Since each input or output line of an n-input gate 
May be ss-0 or s-l ye there are 2(ntl) single faults and 


gntl 


-1-2(n+1l) multiple faults that may change the switching 
function realized by a single gate. For any n-input OR, AND, 
NOR, NAND or NOT gate, (n+l) input combinations are 
sufficient to detect all faults on the inputs and output of 
the gate; see Eldred [13] and Schertz [44]. For example, 

the test set (abc, abc, abc, abc) detects all s-0 and s-l 
faults on input and output lines of the OR gate in fig. 1.1a), 
OGecnceuNGReGatewin 110. l.1b)5. Similarly, the*test set 

(abc, abc, abc, abc) isa complete test set for the AND gate 
Timi cmt. UCP Ouetne sNAND Gaterin fig. isid). Unless 
otherwise stated, it is assumed that the networks considered 
are represented by diagrams where only AND, OR, NAND, NOR 

or NOT gates appear. The reason for this restriction is 
that the s-0 or s-1l fault model is not sufficient to 
properly describe the faulty properties of the more complex 
logical modules. For example, the test set (ab, ab, ab) 
detects all s-0 and s-l faults on input and output lines of 
the Exclusive-OR module in fig. 1.2a). A practical 


realization of such)a module gsishown ,in fig. 1.2b). If input 
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Figure 1.1 Logical gates 
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Fiquee 1.2 Exclusive-OR modules 
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1 to gate A is open (this corresponds to the fault 

“line 1 is s-1l"), then the function realised in the presence 
COfeLidemral ltrs btab, but the above test set does not 
detect the fauit: 

AgminimMal vestasee Lor any combinational circuit can 
always be selected from the fault table (or matrix) of 
themnetworknl2> poole "lien is othe number of input variables 
and m is the number of possible faults in the network, then 
this table has 2" rows and m+l columns. The first column 
of the table represents the esi Op he, correct network 
under each of the 2” possible input combinations. The 
remaining m columns represent the output functions realised 
by the network in the presence of the m possible faults. 

By using this table, the problem of finding a minimal test 
set is equivalent to the problem of selecting a minimal cover 
[35]; however, due to the size of the fault table, the above 
method is practical only in a limited number of cases. 

The derivation of tests is greatly simplified when 
it is assumed that only single faults occur. Using this 
assumption, a number of methods for test set derivation have 
been developed. Considerably less attention has been given 
to the problem of multiple faults and to the problem of fault 
detection in redundant networks. In redundant networks 
certain faults are not detectable. This fact complicates 
the derivation of the test set, specifically when multiple 


faults are considered. 
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1.2 Previous Results 


Present methods {[9,16|) for fault detection in 
combinational circuits usually generate a single fault 
Lec eoctsthog lcancallyeminamal.  Untile recently [5,12,29], 
the problem of multiple fault detection has not been studied 
extensively . 

One of the earliest methods to generate tests for 
irredundant circuits was described by Poage [35]. This 
method derives literal propositions that describe the output 
function and also represent the structure of the network. 
These propositionsare then employed in generating the test 
set. Although producing a minimal test set, this method 
is very laborous even for simple networks. 

Armstrong [2] has shown that a test that detects 
a fault in the circuit must form a sensitized path from the 
fAULeLesced tO the primary. output. This method generates 
a nearly minimal test set with a medium amount of 
computational effort. 

The path sensitizing concept was utilized by several 
authors [10,21,38]. A well known method is the calculus of 
D-cubes developed by Roth [41,42]. The D-algorithm mechanizes 
the process of forming sensitized paths and also guarantees 
that a test is generated for every detectable fault. There 
is no guarantee, however, that the test set generated will 


be a minimal test set. 
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A minimal test set for a two level network can 
be generated by using the prime implicants of the function 
realized by the network [28]. Paige [33] has employed prime 
ino licantsmeco cCenive tests storeirredundant multiple iwlevel 
networks with certain structures. Bearnson and Carroll [4] 
obtained similar results by using Boolean differences. The 
big advantage of the above methods is that they require a 
smaller amount of computation than the path sensitizing 
methods or the analytical method of Poage [35]; however, they 
are not applicable to an arbitrary network. 

Schertz [44] studied the indistinguishability of 
certain faults and has shown how to combine such indistin- 
guishable faults into equivalence classes. He also defined 
the class of restricted fanout-free networks. For such 
networks any test set that detects all single faults also 
detects all multiple faults. 

Recently, the first general solution to the problem 
of multiple faults was given by Bossen and Hong to Saethas 
method (procedure G in [5]) is applicable to irredundant as 
well as redundant combinational networks, but it may produce 
a test set that is far from being optimal. Procedure NE (S15 
which is claimed to generate a nearly minimal test set for 
any irredundant network, does not guarantee detection of 
all faults in networks with reconvergent fanout. Kohavi and 
Kohavi [29] have shown how to generate a nearly minimal 


multiple fault test set for networks with irredundant 
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Equivalent Sum of Products form. 

Ramamoorthy [40] has considered the structural 
properties of large systems represented by system graphs and 
has derived some theoretical criteria for good diagnosibility. 

The problem of fault detection in cellular arrays 


has been studied by Kautz [24] and Friedman and Mennon [16]. 


MomeOutcline OL Current Results 


The main objective of this study is to provide 
methods that would generate a minimal, or a nearly minimal 
test set for the detection of single as well as multiple 
faults in combinational networks. 

Detection of single faults in irredundant networks 
is treated in chapter 2. It is shown that in order to 
detect all faults in the network it is sufficient to detect 
all faults on input lines and fanout branches (called 
checkpoints). The Equivalent Sum of Products form (denoted 
ESP form) of a combinational network is defined and the 
effect of faults upon the terms of this form is examined. 
Finally, a procedure that generates a minimal single fault 
test set is given. 

The multiple faults not detected by a single 
faulitetestesemiconsi strofs al number ofetaultsnthatr prevent 
detection of each other. In chapter 3, the conditions under 
which fault masking occurs are stated and proved. It is 


shown how to find multiple faults that are not detected by 
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10 
dectig les rault=test™cet,e=ln suchsundetected*multiple faults 
exist, then the multiple fault test set is obtained by 
enlarging the single fault test set previously derived. 

Some sufficient conditions for multiple fault detection are 
given and it is demonstrated how these conditions can be 
used to generate a nearly minimal multiple fault test set 
with considerable saving of computational effort. 

Chapter 4 deals with the problem of fault detection 
in redundant networks. These networks are further complicated 
by the fact that the detection of all detectable single 
faults on checkpoints is not sufficient to detect all single 
faults that are detectable. It is shown, however, that a 
complete test set can be derived without considering faults 
on all connections in the network. A multiple fault that 
Seccurscmingaslredundant, cClrcuitemay consist of detectable 
single faults, or undetectable single faults, or both. 
Moleiplemeanlts belonging to these three! classes are 
analysed, and a procedure that generates a minimal multiple 
fault test set for any redundant network is given. 

The generation of tests is much easier for networks 
where the inversion parity of all reconverging paths is the 
same. A simple method that derives a minimal single fault 
test set for such networks is described in chapter 5. It is 
shown that any single fault test set for a fanout-free 
network detects all multiple faults of multiplicity two and 


three. An alternative way of generating tests, which may be 
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11 
Suitable for large networks, is also described. 

In chapter 6 some bounds on the lengeEn of "a minimal 
test set are given. It is shown that at least 2p and at 
most 3p tests are required to detect all Single faults in 
a fanout-free network with p checkpoints, where p > l. 
Similar bounds are also derived for networks with fanout. 

The problem of fault location is examined braerly, 
in chapter 7, and two methods for obtaining the diagnostic 


test set are suggested. 
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Chapter 2 


SINGLE FAULT DETECTION IN IRREDUNDANT NETWORKS 


A network is usually considered to be redundant 
whenever parts of the network can be removed without changing 
the output function. The following definition is a direct 


consequence. 


Definition 2.1: A combinational network is irredundant 
if it is possible to detect all permanent s-0 and s-1 faults 
within the network. 

To consider the set of all possible single faults 
that can occur in a network would yield an incredibly complex 
procedure for finding tests. It is therefore important to 
reduce this set of faults to a subset occuring at specific 


places in the network. 


Detinition 2.2: lhe checkpoints of a combinational 
network are [5] 
(a) all primary inputs that do not fanout and 


(Dima lie tanoucsbrancnies. 


To illustrate, consider the network in fig.2.1. The 
primary inputs are enumerated as checkpoints 1 to 4 while the 


fanout branches are 5 thru 8. 





gi 


£ xesqsdo 





SHAOWLAU THAGHUGSARI WI YVOITUETId DIVAY Bionie ‘wT 


snsbrubex $d ot bstebtanoo yilsuev er Anowoen A . . 
enipnsnio tuodjiw bsvemex od ns> Axowjen sit to s278q sevenente 
s981ib6b § ef aottinttsb paiwolloit saT Jackson juqzuo eds 


. somsupseanod 


gaebaubst1tt 2i Axowsan Isnottsatdmo> A :I.8 noitintisa 





etius? {[-a bas 0-2 snonsmisq [fs josteb o3 sidieseg af 3i 22 
y 
.Atowjen sdAxy atdotey 
esiuet sipnie Ssidrazoq Ils to tse sit azsbienoo of 
xsiqmos yidiOsiont as Bisty Bbluow A1owz6n 6 nt 2ffo00 nes Jag ; 
oJ JuBtiogmi sxoistsiz et tI .asess poibat? 10? eaubesosg 
oittosge t5 pnixvoso tsedue 5s o¢ etliust to 398 eide esagbed — (= 


-Axowton ond at eedteig a 


fsnolisaidmoo 5 10 ainiogdysdo s#rT =S.5 ; 


—S - - a | 
bas tuonsi gor ob stand st veemkve. fs - 
: | os cea : a ie oh > 


Poiensasd 








- — 
a 1) - 


— Po 
De ae 


3 


“ij } 5 - 
° a. i : 





Pai 





Figure @.1 Network N21 


a3 





14 
It will be now shown, that in order to detect all 
Single faults in an irredundant network, it is sufficient 


to detect only the single faults on the checkpoints. 


Lemma 2.1: [29] All single faults in an irredundant 
combinational network are detected if and only if all single 


faults on the checkpoints are detected. 


Breet; Whatever; methodais used for the generation of 
the test set, in the actual circuit there must always be a 
sensitized path (or paths) [2] from the fault tested to the 
primary output of the network. Each connection belonging to 
this path must carry a specific value (0 or 1) when the fault 
is absent and the opposite value when the fault is present. 
Any fanout-free network has a tree structure and there is 
always a unique path from any input terminal to the primary 
output of the network. If s-0 and s-1 faults on all the input 
terminals are detected, then the sensitized paths include all 
wires in the fanout-free network and consequently all single 
faults within the network are detected as well. 

A network containing fanout can be decomposed into 

a set of subnetworks each being fanout-free and having all 
inputs that are checkpoints. Therefore the result. for fanout- 
free networks holds, provided that a multiple fault produced by 
a single fault in a subnetwork feeding a second net is detected 
by the tests for single faults on the second network. Without 


loss of generality, consider the case of two subnetworks where 





at 


DLe soe¢s6 oF 19bx0 nit ted .aworle won od Itbw 3 





shetoitive <i Ji ,AnOwssn Jnsbaubertii ms as etlust sipaia 


,e@ontogdosd> sdj ao ed{us? sipnia sat yino Jyo9296 oF rae | 


- 


thabaubeszi mp air edgiust elpata DIA (€$) + i.k em 
sipaie Ifs ti vino bas ti bssoogsh sus Atowitsa Lenoksemidaos - 


.betostsb sis etntogdosAs sax no esivget® 


to nottsxemsp sit rot bear ei borteam xsvezedw : 20079 
6 8d ayswist jauin suods .tivcorro isudtos sdz at ,jse teary edz 
eit oF bSsteos tivst sdi mort |&) (edstsq 10) dAtaqg Borisienesr 
o3 pnipnoisd nmoisosnnoo dosh .Axowten eid to juqswo yosmizg 
ius} on3 isadw ({f to 0) sulsy co fRFosge 5 yx1so dapm dtsq aldd 
-tasesiq ei sivst ad3 asriw evley etieoago ait bas dgasads ef 
i 93905 bie StusouIJ2 sort A eétl AroWtan sead-svoRds? yaa 
ysemiag siz ot [snimret stugat yas moxd fissq supine » syswis 
tuqni oft [fis fo acivsi i-2 bas O-e2 212 .#26wien odd to Jsuqtuo 
fis sSyfont etitsq bésisienee sds sors \fstpsiab Sus eleniomss 
efpnte iis yltaeupesanos brs Arowsan soxrt-suens} oefd ak gexiw 
[low 28 betootob. sis ide sit nidngiw stiusz | rt 
osnt beeoqmoosb ed 489 gears pigkedaes Asowsen A 
aca epensee meena - 
pan ett ae iach 9 9s Jedi sbugat 


7 
a = 


nae = we Te i ae 


i 


the output of the first subnetwork fans out to provide two 
inputs to the second subnetwork. Suppose that none of the 
tests that detect a single fault on these two inputs will 
devectmeneemultiplestaultsonsboth anouts, | This can only 

occur if there does not exist an input condition on the 
remaining inputs such that the paths from neither input are 
allowed to propogate to the output whenever both inputs are 
identical. If this is the case then the output is not a 
function of the two inputs since the inputs are always the 
same in the fault-free Rae | Thissis a contradiction which 


completes the proof of the lemma. 


This result simplifies the problem considerably. 
In order to find=alminimal single fault test set for the 
given network, a minimal test set detecting only those faults 


on the checkpoints must be found. 


2.1 The Equivalent Sum of Products Form 


The test set for a given network depends on the 
structure of the network as well as the Boolean function 
realized by the network. Therefore both the structure and 
the output function must be considered in the process of test 
generation. A relatively simple expression describing the 
output function of the network while preserving the important 
structural properties is the Equivalent Sum of Products form 


of the network. Because this form (or similar equivalents) has 
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16 
been used already by some authors [2, 35, 5] it is introduced 


here only briefly by definition and simple example. 


Definition 2.3:.+The Equivalent Sum of Products form 


(denoted ESP(f)) of a network is obtained from the Boolean 
expression describing the network by: 

(a) for each checkpoint in the network associate a 
subscript in the corresponding position in the expression 

(b) expand the expression collecting subscripts, from 
fanout points, onto the input literals such that the subscripts 
attached to input variables in the resulting sum of products 
expression denote the propagating path of that particular input 
variable 


(c) do not discard gredundant’ terms or “literals: 


HOVastieCwiecwOrk i nelig ~°2 4) the ESP (ft) ‘forms “obtained by 


expanding the expression 
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With regard to notation, it should be pointed out 
that if there are 10 or less checkpoints then the notation 
used above is unambiguous since the digits 0 thru 9 can be 
used; however if there are more than 10 it will be necessary 
to insert commas between the numbers and the following 


notation will be used: 












Besuboisni ei: ti [4 .c& \S] wr0)tidus omoe yd ~hbeaals bee a om 


r r - Z = ~— _— eo - _— orm pet «ek ee 
OL SiG x [Si Gilie bas AOL LH a3 i ra ¥ 4 1H27 2c. Vino = 





¢ i ok or a P P sew Gl 4 rr c 7 } oy S 
WiC stoubors to mye gaelevivupa sai “E.£ nobeis£ian — 
a ener meg EE . a 7 ——~e» ei tA. 7 
7 a 
¢ n tg & 4 
Pe 7 i ; ate = — my tt — ~' be! 
mteslood oft moxt baritetdc tiowse to ((3) 984% botonsb) 
i = 
ae 
é Yxowson odd pridieseah netebevaxe: 
_ - Se . » ~* f 
i Se5 mi 3 raha 8 | 269 "TO: {s) : 
; us } 4 € ~~ | 2 T = 
: 3 4 . 40% J eka bho JQOIIL aque 


A 7 =? rh, isun é 4 - 3 é ™ ‘ - 7 ~ s ee * i sl a y > 
etqirwedse s NST NouUe Bis . if SiS OFNO ,a@sJn log SORsI 
- 


Stouboyra to mi — uate ates s% a = a ee mecaies Pe ee ee ee 
i OT FO iii (435i Ue r 60 BSit I iv Tbhanrsr © hersass ts i 
4 ry a 







S5sHi3 





 ROLtssor 





Soria 


bad ita ak OL feet sx0m bar 


eo i | a 


ons 








La] 


b d oipahe it 


CELESY Dayal Sopris a alse Dy data ay i eat ee 


b d 


Res We 3, 8a4e8 


The terms of the ESP(f) form represent the set of 
all conditions for which the output of the network is l. 
Similarly, the ser, off all yconditions, for which the output 
of the network 0 is given by the complemented form ESP(f). 
The ESP(f) form is obtained by first complementing the output 


expression and subsequent expansion. For the network in 


fig. 2.1. 
fo = (aybo)5 (C3d4)7 + (ajo) (e344), 
ESP(E) = ay 5a; 6Pog + ay5S3g + Ayedgg + ay ¢PogP25 + Dosdyg + 
+ bostgg + ay 6Pa6%37447 + $3g%37h47 + $37447%ag 


The notation ESP will be used for ESP(f) or ESP (£) where 


no differentiation is necessary or when implying both. 


Derinitcion 2e4e [hee boe form as aeredundant af 1t. 


contains no redundant terms or literals. 


The ESP form is obtained by expanding the Boolean 
expression describing the output function of the network. 
This expression is given by the type and connections to the 
gates in the network. As a result the ESP form is a function 
of the network structure. When dealing with the two ESP 


forms the following notation will be used: 


ESP(f) = 2X,, and ESP(£) = TY. 
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In an irredundant network the occurrence of any 
singlestaultwatiectstat least one Xs and at least one Y, 
term. For the above example, the s-l fault on checkpoint 


2 (denoted by 2-1) would cause the term Xo = a,5b5.d,7 to 


become independent of variable b and X, would grow into 

X5 = aay i 2-1 would also cause the growth of xX and Yo, 
and the disappearance of terms Xqr Y. and Yo: The effect of 
a particular fault upon a given xX. Or he term will be 
established formally by using the definition of a normal 
network. A normal network is a network having no 
complemented input variables. Clearly, any given network 
can be transformed into a normal network by adding inverters 
to the primary input lines where necessary. Because Om-ethe 
inability to distinguish between a fault at the input of an 
inverter and the complemented fault at the output, any test 
set detecting all faults in the original network also detects 
all faults in the associated normal network and vice versa. 
In order to simplify the discussion, only normal networks 
will be dealt with. 

Let Perec ae W be a term of the ESP form of a given 
normal network. The fault p-l will cause the term to become 
independent of variable a, since the value on checkpoint p 
is 1 irregardless of the value of the applied variable. By 
the same reasoning, the fault p-0 would cause ne 
disappearnace of the term a W. The subscripts 


bdss. 5 
associated with each literal denote the path through which 
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the effect of a particular variable propogates to the output. 
If a fault occurs along this path, then such a fault will 
cause either the disappearance or growth of the given term, 
depending on the coincidence, or the discrepancy, between 
the value on that line in a fault-free circuit and the value 
imposed by the fault. Consequently, a fault k-) (or k-0)., 
wheressecep,Gp;rsapspewill cause the term erence to become 
independent of variable a if the value at keane che slault— tree 
Giecuiesundersinput aw asel (0)55 The VAliew at keine cle 
fault=<free circuit can be determined from the inversion 
parity along the path p,q,...,k. For the term Decl 
the value at k under input aW is 1 (0), if the inversion 
Danityealong the path Dyd7- sy khewseeveng (Odd) -sseihe dual 
situation applies if the literal is primed for the term 
Ae! grows due to fault p-0 and it disappears due to 
fault p-l. To summarize, by using the definition of a 
normal network the effect of a fault upon a particular 
term can be determined from the literal (primed or unprimed) 
and the inversion parity along the particular path. 

Thes,ettecteot faults.,on x and eg terms suggests, 
that the complete test set could be derived by checking for 
the presence and growth of the xX; and ze terms. In 


definitions 5 and 6 following, the notatuonswte ©. >. O. means 


that the test t is contained in the intersection P.Q. 





P > 
x 
-tuigqsuo sdt ot astspogetgq alds sitoitisg & 20 Joezt 
7 
eur +f eee? pa  —— I ad : > r = ex1focse s*fus?. 
a be bt ED > dkiahii¢ ait. : 4 + ; Pio. 6 81950 Fist 






sq Islvolstsq edt paocls yvtixrse notesevat ott & 


eine ad & 










ra Ws 4 fT - > ~ S 3 : e 
Pas <K ho sdiives to +503 2 oat 


. 
t ~ a 


Ps 102, ft oi it -yoar 0) rf iOS | 
2) rile a yo Hevizsb sd Sliios toe Jest sist 03 od? . ted 
np "y ae: a fas ; iM off 2m dtwoxp rts ee 


9 waht ody Bia 





eo 
5 










- 
esis 





20 


Detanveronh2 6:8 Aetesteite checks! forithe presence of the 
term X F OF, OL. fore Xe I X,. 
ifa 
Dek initione2. 6:00 Al testt tnchecks? fore growthof’ the 
term xX. = aW (or a =paW)acdueeto literal@ayeifot « W.E 
(or t € W.f), where f and f is the output function and its 


complement, respectively. 


There is a difference in how a test which checks for 
presence and a test which checks for growth of some xX. Or 
can be used. It is possible to derive a test set for a 
special class of networks by generating tests which check 
for the presence and growth of xX. (or “ey! terms only, and 
consequently use only one of the two ESP forms. It is 


difficult, however, to do so for the following cases: 


1. The network has reconvergent fanout. The 
previous discussion suggests, that a test checking for growth 
of the term aW dueuto literal,a should detect sall faults 
which make the term indpendent of variable a, and that a 
test checking for the presence of some term should detect 
all faults which cause the disappearance of the same term. 
This is true in the first case (the only exception is 
defined in lemma 3), bUEVLE a2asenot true in the second sone 
when the network contains reconvergent fanout. Reconvergent 
fanout within the network may cause what is called reconver- 


gent fanout cancellation [2]. This happens when the inversion 
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Pash 
parity along all the reconverging paths is not the same. 
The inversion parity of a reconverging path is defined to 
be the number of inversions, modulo 2, along the path 
between the specified fanout node and the node of recon- 
vergence. The network in fig. 2.2 illustrates the 
difficulties caused by reconvergent fanout. For this 


network the ESP.(f£) form is 


= Saas cr ES eye 


Faults 1-0 and 2-0 cause disappearnace of Aj 5P55°3- Both 


ESP (f£) 


the tests ty = abcd and t, = abcd check for the presence of 
xX = Ay 555033 however, only t. detects s-0 faults on 
checkpoints, 1) and) 26 “tlest ty does not detect the above 


mentioned faults because it sensitizes two paths with 
different inversion parity. This /corresponds to the fact, 
that although fault 1-0 causes the disappearance of Xj 

« on — . ! = = . 

it also causes growth of X, = 1694 TEGO X5 ad). Since 
ty € XAy ty does not detect the fault. 

2. The ESP form of the network is redundant. If 
the ESP form is redundant, it is impossible to check for 
the presence of some xy Such <thatex il Xs = ed See 

ifa 
complicates the search for a minimal test set. 

8. Multiple fault analysis. The problem cf 
deriving a minimal multiple fault test set is difficult 


when only one of the two ESP forms is used. It Wall iaeoe 


shown in chapter 3, that by using both the ESP (f£) 
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Figure 2.2 Network N2.2 


Oe, 





and ESP(f) forms the multiple fault analysis is greatly 


Simpieaaied . 


For the reasons stated above, the approach based 
on checking for growth of both x and 25 terms must be 
used if fault analysis for the general class of networks 
is desired. The following lemma defines the faults 
detected by a test checking for growth of some nonzero 


term, where term means either a Xs or Y; term. 


hemmau2e2: Let N be a even normal network with 

ESP(£) = 2 Xs and asP(£) = % uae Tieaetestec checks for 
the growth of a nonzero term Gig ow duemeo @iteral say, 
then t detects the following faults on all checkpoints 
assocrated with literal a: 

=o areal oP Onecheckpo1nte pp, 

—~s-1 fault on checkpoint k € p,q,---.,s if the 
inversion parity along the path Di Gye eyo bee eVen, 

-s-0 fault on checkpoint k € p,q,.---/,S if the 
inversion parity along the path D fae. sok eesmodd < 


If a is replaced by a then s-l faults become 


eo teau Les sand *vlcewVvensa: 


Proof: If t checks for growth of Xu = Mae as due 
Titeraleaye Lien srt W.f£ = Waf and the output of the 
network under t is 0, unless there is an s-l fault on 


checkpoint p (input terminal). It follows from the way 
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the ESP form is obtained that the output would be also 
Cnangec! if some line k along the path p,q,-...,s is s-l 
(no inverters or even number of inverters between p and 


k) or s-0O (odd inversion parity). 


Bore theanetwoLrkeinecigsec.t che test abcd checks 


b d due to 


DE oT ad 
f = abcd: 


for, thergrowtcierot *theterm Y. = a1¢ 


Hiteral d, since abcd’ « 21 6Po6°37° 
because the network in fig. 2.1 is a normal network, 
test abcd detects fault 4-1 and fault 7-1 (the inversion 
parity between checkpoints 4 and 7 is even). 

It should be noted that for the purpose of the 
Lemma 2 and Lemma 3 NOR and NAND gates are considered as 
OR and AND gates, respectively, followed by an inverter. 
Lemma 2 does not define faults detected by a test checking 
for growth of zero term. Although terms of the form 


a pags where p # q, do not pose a problem, care must be 


taken when terms of the form gearpen are dealt with. 


Temma 2Qeo: pelt testst checks, for ithe growth of a 


Ceriean: W due to literal a, then) t) detects 


a 
1s) we eke oy. 
faults on the following checkpoints: 

(a) on any checkpoint x such» that. x 621; js ee 
andex £ Dydy,-- +7 
(b) on any checkpoint x such thataxicc JG. 


and=s+e6 pyqyersyx@andYsuch that the inversion parity along 


the path i,j,-.-,X and p,qd,--+-+/X Ls inoppehetsame: 
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25 
The type of faults detected is determined as described in 
Lemma 2. 

Prooiyy Listychecks,for.growth of 1X = a; 2.1 page. abel 
GUucmto, icceralea), Ehen t «<< aWet and awilledetect tall-sthau kts 
which: 

jew Cause XY to become independent of variable a, 
and 


2. Do not make the term aW disappear 


MhicmeCcomres@wondsscderect ly to, conditions {a) and 


(b) stated above. 


For example, for the network in PUG ues, 
ESP(f) = ere dnebned “ ena, = ee. 


The test abcd checks for growth of Ye = 


b + Dre 


eA NGO Gene GG 


21521 6°26 Cucweco 
literal a. This literal is associated with checkpoints 1 
Ando. Lae ainpub combination abed detects fault 6-1, but 


does not detect fault 1-1, because this fault causes term Ye 


to disappear. 


Temma 2.4: Tf a test t checks for growth Of ajterm 
27° eae due -to literals a, b,... and e, then t detects 


faults on those checkpoints which are common to eliterals a, 


Sema and ee. 


Proof: If t checks for growth of Xs = ab... .eW (duecmtO 
iepterale sa, by ae wean se cen) tee W.f and it will detect 


those faults which make the term x; independent of all the 
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varlables.a,tb,;skeGe-wxSuch faults. occur on checkpoints 


commonatopally the @daiterals: 


For example, for the network in fig. 2.1 test abcd 


cnecks@lLorsgrowth or Y b d duce EOn lateral aaa 


Fee Go GORI AT 
and b. it detects fault 6-1, because this fault would cause 
growth of Yo into Yo = C35d,7, and abcd ¢ Y..f. Fault 1-1 
would cause growth of Yo ZnO Ya = 4 6o37947- Test abcd 
does not detect this fault, since abcd is not contained in 
the intersection bcd.f = abcd. 

In this section we have established the effect of 
faults upon the terms of the two ESP forms and defined the 
faults detected by a test that checks for growth of some term. 


A method that derives a complete test set will now be 


described. 


Z2<2 ‘The Single Fault Procedure 


The following procedure generates a minimal single 


PaulcCeacesc set Lom an iLeredundant combinational networks 


Procedure «2th: 
1. Evaluate the ESP(f) = 2 X, and ESP) (£) 718) Y, 
forms of the given network. 
Qn Hor each xX; and ae generate all terms Xi and Se 


which are one variable less. For each Xs compute Zh = X;.f. 


F hy Yelaecompute «Wie =e. 
or eac i p i | 
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pass 

3. If there exists some X5 Or hy term having more 
than one 4, or Wa term that is zero, then repeat step 2 with 
those Xi or me terms having common checkpoints, by removing 
the variables with common checkpoints according to Lemma 4. 

4. Choose a minimal cover MC, covering all the Zo 
and “ey terms. MC, can be obtained by using the method of 
pairwise antersections [28]. 

BamaCGonstruct tThe®checkpoint covering table where 
the column headings are the checkpoints of the network and 
the row headings are the members of {Mc,}. Bhtry Wa, ))- as 
i Oi tetesteiedetects s=1 (Se0y faule onecheckpoine ai 
For lthe Zh and we terms obtained in step 2 the entries are 
filled according to Lemma 2 and 3, for those obtained in 
step 3 according to Lemma 4. 

6. Find a minimal cover MC, Suchethat, ald. check= 
points are checked for S=(Oeand) e-ietaults ..eMGn toed minimal 


2 
single fault test set To: 


Validity®of=the Procedure: In order to establish the 
TaLid@uyeor, the procedure it is to be proved that the 
procedure generates a test for every single fault in any 
irredundant network, and show that the test set generated 
iseatiinamalMteste sete 

Any aba eet) irredundant network causes growth of 
some x Oye Y, term due to one or more literals. Procedure 


Je letarat, Generaccs ONS variable less terms for each Xs and 
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28 
he term. The corresponding Zy and ve terms represent tests 
to detect all faults which cause some xX; Or#Y? growbdueato 
one variable, and most (if not all) of the faults which 
Cause growth due to more than one literal. Step 3 
guarantees that a test is also generated for any fault of 
the latter type for which a test may not have been generated 
iLnesteprZ. 

Minimality of i Lou lows) : Lom sthe fact, that MC, is 
a minimal covering of all Wy and Zn terms. Because TS is 
selected from MC, aS a minimal test set detecting all s-0 


and s-l faults on the checkpoints it is also (Lemma 2.1) a 


Minimal test set for the entire network. 


The Equivalent Normal Form as used by Armstrong [2] 
is similar to the ESP form employed by procedure 2.1; 
however, there are some significant differences between the 
two methods. In [2], tests are generated sequentially and 
a scoring function is used to select the next test. The 
resulting test set is nearly minimal. Armstrong has 
conjectured, but not proved, that a complete test set will 
be generated. On the other hand, procedure 2.1 derives a 
minimal test set, and step 3 of this procedure guarantees 


the completeness of the test set. 
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Peeatpleresdem CONnsider thie Circuit, in fig. 2.1 whose 
Karnaugh map is given in Table 2.1: Table 2.2 is obtained 
By performing steps 1 and 2 of procedure 2.1. Minimal 
covering MC), of all the Zh and me terms can be obtained 
by inspection: MC, = "(abed), sabecd, abcd, abcd, abcd, abcd, 
abcd, abcd, abcd), andw step omy verdasmrable 2.3. “From this 
table, MC. = (abcd, abcd, abcd, abcd) = T is a minimal 


Single fault test set. 


Procedure 2.1 derives a minimal test set that 
detects all single faults. This test set may not detect 
all multiple faults. The problem of multiple fault 


detection will be examined in the following chapter. 
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Karnaugh Map for Network N2.1 
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Checkpoint Covering Table for Network N2.1 
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Chapter 3 


MULTIPLE FAULT DETECTION IN IRREDUNDANT NETWORKS 


the problem of vyhow tondeteéect jallyfaults;isinglesas 
well as multiple, has received much less attention than the 
Single fault problem. One reason is that the total number 
of faults in a combinational network with n lines is eee 
foleand the complexity of the: calculations necessary to 
consider all of them is tremendous. It will be shown, 
however, that only a very small fraction of this-total 
number must be considered. Some faults (such as s-0 faults 
on the input and output lines of an AND gate) are 
indistinguishable. They can be combined into equivalence 
classes [43] and any test which detects a fault belonging to 
auclasemdecects all faults in that class.” From now) On@any 
equivalence class of single faults will be considered as a 
single fault. Even more important is the fact, as in the 
case of single faults, that only faults on the checkpoints 
must be considered. It will be provwd that any multiple 
fault within a given network is equivalent to some multiple 
fault on the checkpoints of the same network. Two faults, 


F, and F,,are equivalent if and only if the two Karnaugh 


a 


maps representing the output function of the network in the 


ry 


on 
; 

“ 
“ 


Vie 





mae t. rie +4 egptee tk tl te t ‘MYT M oa OIA 
cary } 1 L } iJ 4 wtat Sb CLS sta VPS Dh etla BS 






a 
q ee ef af ~ “res ~ cre — . 7 r : ba 
S2niegtosia sit no ative yino. gst .atiue? sipnie to 9s 





= : ' { 
eke r GaAek ter inmate seen a i. a Q \ a 
7 nigsvies yas tocs Savoiq sd {firw tI (ere ne 





34 
presence of FL and Fo, respectively, are the same. The 
multiplicity of a multiple fault is defined to be the number 
of single faults which occur together. For example, the 
NULL LLc tty ol a single Pave oe, @MU Lelio City (Olea 


MeL reoeLalltwconsisSting OL) two single faults, is 2, etc: 


Lemma 3.1: [5] Any multiple fault in a combinational 
network with n checkpoints is equivalent to some multiple 
fault of multiplicity k among the checkpoints only, where 


Ike =. 


Proof: (i) Networks without internal fanout have a tree- 
like structure, where the gates represent the nodes and the 
Dirimary, OULDUL,1Sathne root yor=the tree.) “A s-0 4 (s-1) sraulet 
on the output line of a gate is equivalent to some s-0 or 
s-l fault(s) on one or more inputs of that gate. Consequently, 
Lom boepOsstoOrercorrilnd any equivalent Laule = parcern ony the 
input, checkpoints ofthe network. ’?[he-multiplicity of this 
new pattern cannot be greater than the total number of 
Gheckpornes, witch ISs=nie ine tCwoefault patterns are) equiva 
lent in the sense that their effect upon the network function 
is the same and any test detecting the input fault pattern 
detects also theyoriginalypattern.. Hence;eif all multiple 
faults among the input checkpoints are detected, all 
multiple faults within the network are detected as well. 

(ii) Networks with internal fanout can be 


decomposed into fanout-free segments. The proof follows from 


be 
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(i) above, since all the fanout branches are checkpoints. 


Theorem oel: insorder to detect all multiple fauits 
in an irredundant combinational network it is necessary and 


Sutfyerent to aetect all multiple faults on its checkpoints. 


Proof: The proof follows from the previous lemma. 


ol erate Masking and Minimal Test Sets for Multiple Faults 


Therewis mnovneed to consider all multiple faults on 
the checkpoints of the network. A test set for single faults 
of a given network does not detect those multiple faults that 
consist of faults which prevent detection of each other. This 
effect is called fault masking (see [17], [18]). Before going 


into more detail, some notation will be introduced: 


p-l denotes an s-l fault on checkpoint p, 
p-0 denotes an s-0 fault on checkpoint p, 


fh denotes a single fault, 


F. denotes a multiple fault, 


CE f.) denotes multiple fault consisting of single 


LY 


faults fi and fo: 
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(f, £5) 72%5 Se Qmdenobes the muluiple scout (f£,,£,), 


ae me denotes a fault fs causing growth 


causing the term % to disappear. 
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Detind tions. see Apscungle,oremultaple £aule Fy is a 


subfault,oft aamultiples faulty Fl .ee-lt 


2 fe 


yrigreces f) ee Fo 


is a subset of F.- 


In a fanout-free-network,.thesmultiple, fault 
F = (Li store, f) causes the disappearance of the term 


jaa 


disappear. Conversely, F makes xX. GEOwelitiomrauie 


Xey if at least one fault f (eee bea ao ly TENS) x. 


fue Kremer ee, 1), Causes xX to disappear and at least one 
fault fal Meme ott sy) nakes xX. independent of some of 

its variables. In the case of networks with internal fanout, 
Pheswetrect sof a multiple fault Upon some Xs OG us term must 
be established more carefully. For example, for the network 


b 


ieee ee clic ae rm Xy = disappears due to fault 


SIGs TO 
(1l-0,72—-0), butyit grows into Xy = C44 due tro fralle wll —-0,2-O; 


5-1). This term would also disappear due to fault iS— 1 ot) 


Or fault (5-1,7-1). 


Deeinwti ones.) 4. fault f., TS Said topmask a Laue fy 


(denoted £,/f,) under a test *setT) “if -any test tC in T that 


detects ft. when it occurs alone, does not detect the occurrance 


of ft) and f, together, 1.¢e., (f£,,£,)- 


Let fault ti cause the growth of xX into Xin and jlét 


test t be contained in the intersection x} .£, where f is the 
complement of the output function £, *"In “other #words Cycerects 


£ Sincesi (cl) “="08lm the tault=[ree network and £(t) = l 


ie’ 
in the presence of f\- If some fault ft. masks fault fis then 
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ey) 
the output of the network under test t in the presence of fy 
and ft, must be the same as the output of the fault-free 
Reewonkpie ern ft) On imethe: presence (of (£,,£,)- 


this fact, some important relations between faults capable 


From 


of masking, and the xX and tej terms can be deduced. These 


relations are stated in Theorem 3.2. 


Theomem 3.2:Let.fault ft) be detected by test ty lorstLesec 


ne which checks for growth of Xp rXore es eX, (or Ypr¥oree er ¥) 

Gu cReOmtP aennC taut G.emaskeerault f UnceuEcest sos OGL JG 
it 2 at Xx y 

then: 

(a) fy detected by ty 1) £53Xy ao (Oye ae Hy a0 “2 6)s <etare! 


2) there exists a term Vy Such that 


VRCEOW SME ILLO UY ecC mL eee ve 
Oo O x QL 


(b) ft) detected by keg lz) £:Yy > EQ ave 2 oO preeess, ¥70, and 


2) there exists a term Xe euchethiat 


B B 


X, grows into Xj} and = € Xp 


Proof: Only case (a) will be proved, since the proof 
for (b) follows by duality. 
1. Assume ti causes the growth of Xy only. Hence if ft, 
occurs Xi?°Xye but ty € x}-£ and fy 1s detected, sunltess X,=0 
due to some other fault. If ft, causes growth of Ky rXore eK, 
which are checked for growth due to Fale eT len, TESS toe then 


ft, must cause disappearance of all of them in order to mask f.- 
Jame ee” fy occurs, the output of the network under Le 


is 1, and consequently £7:%, + 0 for all “G such that t, € ue. 
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When (f£,,£,) occursmtiien £,:X,? pica + 0 and some Y, 
must grow to YO and ay € vo because the output of the 
network under input ty is the same as the output of the 
fault-free network. Provided that ty and f., are the only 
faults that occur in’ the network, then vy grows due to ft. 
or (f£,,f£,)- If some other faults occur simultaneously with 


fi and f5, chen Y, may also grow due to such faults. 


A single fault can be masked by both single and 
multiple faults. To illustrate, suppose that fault ft) is 
detected by a test t that checks for growth, due to fie of 
Wage 09 hres It is possible that no single fault causes cie 
disappearance of all terms a ee however, if some 
multiple fault Fo OCccUurSesuch tha F,:X)7 On Ty oa OF 
then ti will not be detected when ty and FE. beuhyoccuce |» 1t 
should be pointed out that, when masking is investigated, 
the necessary and sufficient conditions for masking to occur 
are the important features. Obviously, tEesomewsubLaule of 
EF. masks fault ft) astwell ,Mthensthesoccinrrencesor EF. is 
sufficient but not necessary for f, to be masked. From now 
on, by saying that a multiple fault FE. masks a fault fio 
it is understood that EF. masks fos bULenOsSUbEOUmGETOL FE, 
masks f,. Corrollary 3.lrestates the result of theorem 3.2 


for this more general case (only one of the two dual versions 


is stated) 
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Corollary @ealteletataultete be detected bynantest t that 


i 
eheeksmior growthyadue to fi of SH ere BG If a 
multiple fault FE, masks fault fi underatestme ,wcnen 
Le Fok)? 0G .ERG Sy Oj aand 


2. There exists a term Yo Such that Vy grows into 


vel AnGleCee Ye 
or} oF 


lige At se chbhilas Fo masks no individual faults, say faults 


firfyr--- tL then Fo causes the disappearance of all X. or 
y, terms that grow due to these faults. Consequently, Fo 
wi tlealso mackpanyelaulterethatrastaasubseteot {f),f5,---/f,}. 


Multiple faults that are not detected by a single 
fault test set will now be considered. Let Te be a single 
fault test set for the given network. A multiple fault 
Eas (LE, ,foreeee 


c= ee seme skedy Under Toy by some subfault of F. 


f.) is not detected by TS if every fault 
fis 
Suppose that fault fy is detected by a test tL Ssuchetnatecne 
output function £(t,) = 0 in the fault-free network. If 
fault tL is masked, then, by theorem 3.2 there exists some 

te term that grows into he and ty € a however, if the 
intersection ete t contamswatnleastfonercest t. € Tor then 
thergruowtheof this termewill be detected at the output. 
Consequently, when looking for mudtiple faults that aregnoe 
detected by Tor it is sufficient to consider only those xX, 


or Yy terms that are not checked by T fon growkhsduesto 


some fault. 
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It is convenient to use an oriented graph for 
describing the masking relations among a set of faults under 
a given test set. The nodes of the graph are the faults 
considered and an arc from node A to node B indicates 
that fault A masks fault B under the given test set. 
Assuming that the single fault test set TS has been already 
derived, the following procedure constructs the masking 


GGpapo. 


Procedure 3.1: 


ieee Olea lly xX. or Me term that is not checked for 
growth due to some fault perform step 2. 

Zee OLeanyesing le Or Miitiple fault Fo Suchm nat 
Eee eX anCe eee T= flor F:Y.> Y! and Y"ft.T = 9g) 

vi a wh Ss 7 5 7 S 

construct the intersection 

2 Er See emanate? E Cy ean uaa aans ao 

ea Ss ee) Ss 

ts P= tt, } #S, consider the set S of all faults detected 
by {t,}. Remove from S all faults that cause term X; 
(or ea) to disappear. Then use the first condition of 
theorem 3.2, or corrollary 3.1, to determine the masking 
relations, under tt, t, between any fault f, € S and any 
subfault of F. Disregard any masking relations between 
twoutaults on cinputs tof Sthessame-gater 

3. When step 2 has been performed for all X. and 


Y. terms, construct the masking graph from the masking 


relations obtained above. 
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4] 
The validity of the procedure is established in 
Appendix A. An example follows, that demonstrates the use 


Obs ehise procedure. 


Example 3.4: For the network in fig. 3.1 test set tii 


Tol = (abcdegh, abcdegh, abcdegh, abcdegh, abcedgh, 


abcdegh, abcdegh) = (t,,t5,t3,ty,t.,t.,to) 


Cerecesea| Pecinglemtauliucmuscemtable 3.1). It is to be 
determined whether Toi devecto alsovalle multiple waults:. 
Tabler3.2 lists all the X. and ¥4 terms of the two ESP 


forms, the terms Xs and ee and the corresponding Z, and i 


k 
terms, where Za = X1.£ and we = baat The table also shows 


how these Zh and Mil terms are covered by test set Toi The 


term xy = a boc3d,e, is not checked for growth due to faults 


eo rani, 5-1, xX grows due to the multiple fault 


(1-1,2-1,4-1,5-1) into Xi = Ca, but the intersection 


Mts contains test t. and ty and consequently this 


growth will be checked at the output. Next, it is necessary 


to check how Xx) grows due to all faults that are subsets of 


Gi-— le 2—),4—Paoedy) . Due to fault U1, 2-1,4-1) x. growssinto 


iN 


X=) ¢C = g and the intersection P is 


_s 
1 Cnr where X -£.T. 


3 1 I 


yey Xj, -X,-£-TLy = ce. (atbtd) .f.T_, = ty 


Test ty detects faults 6-0 and 7-0. Neither fault causes Xy 


to disappear. Test ty detects fault 6-0 by checking for the 


and Y. = b 


growth of Y, = aide 3 256 (see table 3.2) and both 


1 
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Figure 3.2 Masking graph for network N3.1 
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TABLES 3a, 


Test Set a for Network N3.1 
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t,=abcdegh 
t,=abcdegh 
t,=abcdegh 
t ,=abcdegh 


t.=abcdegh 


t =abcdegh 


t =abcdegh 





43 


et 


L.& 3d@ar 





{.€U siowsst zot ..?P 352 seat cr 
ie | - 













a 
] iy a 2 $ g ve 
Da ony ad a ~ ) 7 
ia D - - - | dpebods= 9 . 
| - 0 0 G 4 7 | dpebodse, 9 
| 
Po. ee : 
t! = - - - f | dpsboda=, t ' 
Pats aie - + | dpBbodien, 3 
| m : ' i _ - | dpsboda=_4 
a e : f : “ - dpebods=, 9 = 
| tf - ‘ipsbSua=, 3 . 
7 
: 





44 
TABLE 3.2 


Testing Table for Network N3.1 


abcdeh 
abcdeh 


(at+tb+c) deg 
degh 


(d+e)gh 
(atb+c) gh 


Covered by ie 


ag (deth) 
abcg (de+h) 


bg (deth) 
abcg (deth) 


cg (deth) 
abcg (deth) 
oe er 


(abct+tg)deh 


(abct+g) eh 
(abct+tg) deh 
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terms disappear due to the multiple fault (1-1,2-1). But, 
test ty is the only test that detects fault 6-0 and 


consequently (1-1,2-1)/6-0 under T Fault 7-0 is 


1° 
detected by checking for the growth of Y, = djhs- This 
term disappears due to fault 4-1, hence 4-1/7-0. Because 


test ty Gomene conlyecest that is Contained in the inter- 


section X,-f.To), there is no need to consider any other 
term Xi- By repeating step 2 of procedure 3.1 with terms 
X53 and Yer the following masking relations are obtained: 
7-1/4-0 (here fault 4-0 is chosen to represent the equi- 
valence class (4-0,5-0)), 6-0/4-1, 6-0/5-1, 6-0/7-1, 

7-0/l1-1 and 7-0/2-1. In addition, fault 7-0 masks fault 6-1 
under t, and ty: Thos relation 1s disregarded, because 

7-0 does not mask 6-1 under te. and consequently under Toi: 
The masking graph obtained is given in fig. 3.2. From this 
graph it is easy to observe that the multiple fault 

Fy = (1-1,2-1,4-1,6-0,7-0) is not detected by To. The 
graph also indicates that all subfaults of ‘the multiple faulc 
FF, = (1-1,2-1,4-1,6-0,7-0,7-1) are masked. This fault 
however, can be disregarded, because checkpoint 7 *cannot be 
both s-0 and s-l1 at the same time. The same is true for 
multiple fault F. = (1-1,2-1,4-1,5-1,6-0,7-0), since fault 
(A=isc5eib)e is tequisvalentwito: faultic/-L. The multiple fault 

Fi can be detected by any test that checks for growth of 


some xX. or “te term that grows due to Fi: For example, 


— oe ee ee 
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growth of Y, = C35, LO ae = and abcdegh is contained 

in the intersection Y3-f. It shovuldebemnoted tthatgresteset 
Tol was selected from a highly nonminimal covering of the Zy 
and Wa terms. Procedure SF would produce test set Too! 
Te5r= (abcdegh, abcdegh, abcdegh, abcdegh, abcdegh, 


and this test set detects all single as well as all 


multiple faults. 


Tf a multiple fault exists, that is not detected 
by the single fault test set, then the masking graph has a 
strongly connected subgraph, i.e. there issat east) one 
Poopeimetie Goapli. It tie masking graph does not have any 
loops, then the test set detects ade mu. tiple Laullcs, 
since at least one subfault of any multiple Paul te SeiOt 
masked. For the above example, note that the nel bechoults 
fault (6-0,7-1) is detected, because 6-0 is not masked 


if (1-1,2-1) does not occur, etc. 


After finding the multiple faults that are now 
detected by the single fault test set T., this test set as 
enlarged to detect the undetected multiple faults. Procedure 
3.2 given below derives a minimal multiple fault test set Ta 
by adding a minimal number of additional tests to the test 


set T. generated by procedure Ohne 
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EEGCeaurer omc: 

1. Perform steps 1-6 of procedure 2.1 to derive 
the minimal single fault test set To: 

2. Use procedure 3.1 to construct the masking 
graph and” find the” set” M = (F)/For-+-+Fp) of multiple faults 
that are not detected by ae If M contains only one fault, 
find a test t that» detects the tault, set T#S= tvandegosto 5. 

eee Or ecachervattc tiem vands LOreadel x. and = 
terms that grow due to og compute 

Xs such that re Xan and Z, = Xi.f 


k 


vilscuchwthater 2Yar 1s poand Wo f= Yi.t 
J Prt J m J 


and the set De Gfara lle testessthet metect fault os is 


D,, = {union of all Z, and W, terms computed above}. 


k 
A) tesa oa) minima lesteSiasseiye such that. 1o covers 
all the De terms. 
5. mebne multiple, fault -test,.set Ten is given by 


= v 
Tn Tout. 


The multiple fault set test derived by this 
procedure is a minimal test set in "that ce CcOntaimscmune 
Single fault test set T as a subset. For a given network, 
there may be a number of minimal single fault, test seus; 
Tot ts2???c' sn (all of the same length). The associated 


multiple fault test sets te ei mn Send however, 


ve 
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GOBuOteiaveatobceOtetiesscame Length? Slt aysingle fauit 
Cec set Tet CheckhoetOmegrowcnwoledscemany x and Ys terms 
as possible, then the number of faults capable of masking 
evcmalcomciesnumnber Ofsundetected multinlestaults is 
minimized. Consequently, the associated multiple fault 
test ae Wiebe MiniMal ele. home t ys thateamnecessary 
and sufficient condition for choosing Toi with the above 
properties is as specified in step 4 of the procedure 2.1, 
dee eet ac MC, is a minimal cover (rather than any cover) 


of all the Zy and W_ terms. 
m™m 


Example 3.2: For the network “in fig. 2. fisee p. 13); 
test ser Ts derived by procedure 2.1 is 
T. = (abcd, abcd, abcd, abcd) . 
Table 2.2 (see p.31) will be used when performing procedure 
Be potepe 2 solecnis procedure applied to the four Xs terms 
reveals no masking, since the intersection P is always empty. 


Term Yy 2 21524 6°26 is not checked for growth due .co fault 


Coeleecer rable 2.2) andett can grow into Yi = ajc: The 
intersection P contains test abcd and the intersection 
Y,-£.T, is empty. Test abcd detects faults 1-1,3-1,5-1 
andme- (see Table 2.3). ralic  1-l sand) >-lecause Yy to 
disappear, and fault 6-1 belongs to the same gate as 8-l. 
Hence the only relation that is marked in the masking graph 
(see fig. 3.3) is 6-1 masks 3-1. Term Y, = a15°39 can 

grow into ays and Cagr respectively, but the intersection 


P is empty in both cases. Step 2 performed with term 
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Figure 3.3 Masking graph for network N2.1 
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es a 
Y3 a 


same argument with term Ye = C39 reveals that 5-0 masks 1-1. 


15 shows that fault 8-0 masks fault 3-1, and the 


Term Ys = Ay 6P 2637547 is not. checked for growth due to 


faul - = = 
auleel—=l "and fault 3-1. For the term Ya Do gdyrs 


P = abcd and Y5.£.T. = ¢. Test abcd detects fault 1-1 


end raultm5s=> le by checking for growth oL ole a b 


e175 -25,3 7 
Since 3-1 causes disappearance of Xi 3-1 masks fault 1-l 


216°39448 


shows that fault 1-1 masks fault 3-1 and fault 8-l. 


and fault 5-l. The same reasoning with term X, = 


Hinakiyvesestep 2eOL procedure au! performed with term Yo = Cag 
indicates that 7-1 masks 1-1. The masking graph constructed 
from the above masking relations is in fig. 3.3. From this 
graph, it is seen that the following multiple faults are noc 
detected: (1-1g3-1), (1-1,3-1,5-1), -(lai63-1,8-1), 
(1-1,3-1,5-1,8-1). Any one of the faults causes growth of 


: = ' ae z 
Y Lato Y. = body and Yo.f abcd + abcd. 


Test set T 
m 
Wr (abcd, abcd, abcd, abcd, abcd) 
is one of the several minimal test sets that detect ali 


single and multiple faults. 


Example 3.3: For the network in fig. 3.4, the Cwo kor 


forms are: 


-_ —_— = -_ -_ 


ESP (£) = 8, 5bytb4Op7457+8y gba Cag tay ghs43 gt) go2g46tA18%38%6 
" re — = oe 5 a = + 
ESP (f£) B bed ta, gb stb yCogdagtay pho a 74 ety 791 8°27 

1 7297S2g4agt81795%6437¢8198179371817¢28° 38°37 
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Figure 3.4 Network N3.4 
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By procedure 2.1, MC, = (abcd, abcd, abcd, abcd, abcd, abcd, 
abcd, abcd, abcd) and T. = (abcd, abcd, abcd, abcd, abcd, 
abcd). Procedure 3.1 shows that there are no undetected 
Miubciplesfaults and dae my T sean ini Magen ep emia lie Lest 
set for the network. 

Procedure NR in [5] is claimed to generate a nearly 
minimal multiple fault test set for any irredundant network. 
The network in fig. 3.4 is a counterexample . By procedure NR 
Abnormal True Tests = (abcd, abcd, abcd) 

Tests (abcd, abcd, abcd) EES that checkpoints are 
"normal." This test set does not detect all faults, because 
test abcd, which is the only test detecting the faultss-l, is 
not contained in the set. 

The method presented in this section generates a 
multiple fault test set which is minimal. However, the cost 
of obtaining this minimal set is reflected in the increased 
computational complexity. In the following section a 
considerably simpler method to derive a nearly minimal test 


set will be described. 


BaD Suet icienteCOnadLtioOns for Multiple Paulie. Detection 


Rather than looking for multiple faults iat sare 
not detected by a given single fault test. set,--. Gis possable 
to use a sufficient although not a necessary condition 


(theorem 3.3) and derive the multiple fault test set 
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directly. We shall first consider networks with an ESP 
form such that all terms can be checked for growth as defined 


in the following definition. 


Definitions. .3; Growth or 18 acd gly 
aeeern x is strong. 
eheckedubyeas test setel, af for any single or multipie fauit 
Fir such that FL iX,°X., the intersection X!.f is nonempty 
and contains at least one test t e€ T. 
Aesimolar definition for growth of “a yy term follows 
by duality. The following theorem specifies sufficient 
conditions for multiple fault detection in irredundant 


networks. 


Theorem 3.3: Let N be an irredundant network with 
ESP(f) = 2 X, and RSet ao > Y5- If a test set T detects all 
single faults in N and strongly checks for growth of emther 
all xX. terms, or all ss terms, then T detects all multiple 


faules’in N= 


Proof: Let test set T detect all single faults in N. 
In order to prove that T detects all multiple Pau CS ee 
sufficient to show that the masking graph, under T, does not 
have any cycles. Suppose that test set T checks strongly 
Boregrowth ot all X5 terms, and let ne and Th define a 
partition On eT such that) all tests that produce the output 


of one in the fault-free network are an tT. 
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AnVetault tf. that is detected by some test te en Te 
causes growth of some zs into ee where ba € a oe By 
theorems 3.2,-if t. is masked there exists term X; that grows 
LOLO xX; and ts 3 Xie However, since T strongly checks for 
growth of all xX; terms, the intersection X!.£ will contain 
eteleast, one test from Ty and consequently growth of any 
xX, term will be reported at the output. Hence, if any 
fave f. that is detected by some test from TS is masked, 
then it is masked by a fault that cannot be masked under 
ECoumccCtn = ine Other words, no fault ft. Canpbelonguto, a 
cyCclesor the masking graph. 

Let fault to cause growth of XyrXoreces So Fault 
tb Losiaskeduunder test set T, if there occurs a fault ft. 


(or F,) that makes all the terms X1/X T 1S disappear. 


gree 


Piers esSlrtiaclenteto consider that in is masked by fo; int 
fy, is masked by Fo, then the following argument can be 


applied to all components of Fo. Two possibilities can 


occur ; 


1) Fault ft, is detected by some test from To: Then fault 


ft, cannot belong to a cycle of the masking graph as was 


shown above. 


) peel f. is detected by some test from Th and then it 


causes the growth of one or more xX; terms, say terms 


D4 eee cele 


ie ptr > is detected by T, unless there 


exists fault f (or F) such that it causes X 


3 eee 


Xoer to disappear. Argument (i) and (ii) can now be 
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repeated for fault f,- Obviously, any multiple fault either 
contains at least one fault that is not masked under T, or 
makes all the xX terms disappear and then the output of the 


network would be constant. 


For any network with at least one ESP form such 
that all its terms can be strongly checked for growth, the 
result of theorem 3.3 can be used to derive a nearly minimal 
multiple fault test set which will be minimal sometimes. 
The set of networks with an irredundant ESP form is a proper 
subset of all such networks. Because an irredundant ESP 
form does not contain any redundant terms or literals, it is 
possible to check strongly for growth Ob all ues. terms... «le 
multiple fault test set is generated in the following two 


steps. 


PLOGeOU Ge NSI6o.: 
1 User procedure 2.1 to derive a minimal single fault 
EeStL (SEL To: 
Diem OSL, T strongly checks for growth of all X5 ope cebih 
a terms, then i is also a minimal multiple fault test set. 
Otherwise enlarge T so that either growth of all Xs terms 
or growth of all we terms is strongly checked. The resulting 


test set is a nearly minimal multiple fault test set. 


The above procedure derives the multiple fault test 


set without performing the multiple fault analysis and for 
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this =reason the computational effort is low. This is 


illustrated by the following two examples. 


BXxamplewoeo+) lest) set. 7 
T = (abcd, abcde, abcd, abcde, abcd, abcde, abcde, abcde) 
is a minimal single fault test set for the network in 
Bien + eee Net hort) merOrmeotecnls network is 
ESP(f) = a,az + a,b + a,b. f bob, + bec. + cp.d_ + Cedge19 


Because=!) strongly jchecks, for growcm of all x; terms, it is 


also a minimal multiple fault test set. 


Example 3.4: |Test set T_ = (abcd, abcd, abcd, abcd) 
detects all single faults in the network=2n<649<--2e)--—-2f 
tests abcd and abcd are added to To, all the - terms are 
strongly cheeked for growth. Test set Ta 

T, = (abed, abcd, abcd, abed, abcd, abcd) 


teva nearly minamalemudtuphe fault test sét, since the 


lenqgenwormaeminimal muiltaple tault test, setwis five. 


Tf a network has a redundant ESP form, then it is 
not always possible to strongly check for growth of all 
x5 Ormauel ae terms. It should be noted, that the network 
itself does not have to be redundant; however, it is always 


possible to weakly check as defined below. 
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Figure 3.5 Network N3.5 
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DEefini tiony 34-4-9 fiGrowth! ofa term Xs is weakly checked 
by test set T, if for any single or multiple fault Fy such 


ferent. Fix; > Xay the intersection X..f is either empty, or 


if nonempty then it contains at least one test t ¢€ T. 


For example, for the network in fig. 3.4 the ESP (t) 


form is 


17P4tP 4979397481 gP5o2gt1 gP543.Q741 go 28467 F187438° 


Here, it is not possible to strongly check for growel ore tne 


ESP(f) = 


term Xy = aj ghad3¢, since xX, can grow, due to fault 5-0, 


AO X) = aj gt39 and the intersection ee is empty. Tests 
abed and abcd are sufficient to weakly check for growth on 
Rae 
It is difficult to prove, that a test set which 

detects all single faults and weakly checks for growth of 
all x. terms ator tal Sg terms), also detects all Mua Garpwte 
faults. However, a test set that weakly checks for growth 
is lsyoneigy {else xX; terms and we terms detects all faults in the 


network. Moreover, this result holds for irredundant as well 


as redundant networks. 


Theorem 3.4: Let N be a combinational network with 
ESP(f) = 2 X, and cheney) es Y5° If test set T weakly checks 
for Groowe. on all X, and all ue terms, then T detects all 


detectable faults in N. 
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Proof: Any single or multiple fault F in a combinational 
network causes growth of one or more X; and/or sy.) Clerm. 
Provided that F is detectable, there must exist at least one 
x (or Bal term, such that F: xX; * Xi and X!.£ # ZG. From 
definition 3.4, any such nonempty intersection must contain 
at least one test t € T. Because test set T weakly checks 
Ope tele htiele Che Swear X5 and oe terms, it must detect all detectable 
faults. Fault F (single or multiple fault) is undetectable if 


1 m 


intersections X1-£,.., X.£,¥]-f,---, Yet are empty. 


F: Xy > Xyreees es nel Nes Ss Hpnoosy Wee EE iets all the 


Bossen and Hong [5] obtained a result equivalent 
to that one of theorem 3.4 by performing "cause-effect analysis 
for multiple fault detection", and they described a simple 
method (procedure G in [5]) that derives a multiple fault 
test set for any combinational network. However the test set 


generated by this procedure may be far from minimal. 
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Chapter 4 


FAULT DETECTION IN REDUNDANT NETWORKS 


In a redundant network certain faults are not 
detectable, hence the output of the network is correct 
in the presence of such faults. To ensure that the 
output function realized by a redundant network is correct, 
it is necessary to detect all detectable faults. It may 
also be desirable to detect all faults, not only the 
detectable ones, since the presence of an undetectable 
fault removes some of the redundant properties of the 
network. For this purpose, the network would have to be 
supplied with additional testing points, being in effect 
converted to a multiple output irredundant network. 

This problem will not be considered herein. 

A redundant network contains at least one 
undetectable fault. Because any stuck fault on the output 
of a gate is yequivalent tova multiple jfault ron ithe einputs 
of the same gate, a redundant network must contain at 
least one undetectable fault on some of its checkpoints. 
The set of undetectable faults on the checkpoints 
characterizes the redundant properties of the network in 


the sense, that corresponding to any single undetectable 
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ep 
fault in the network there is an equivalent multiple 


fault consisting of undetectable faults on the checkpoints. 


Grim ong les Faults Detection 


When deriving a single fault test set for a 
Pedundaneenecwork,+.t) 1s nots surricient to generate Cests 
that detect all detectable single faults on the checkpoints. 
THemtestescetsdertvedmingehis way might not detect all 
detectable single faults in the network. 

First consider fanout-free networks. For 
example, the network in fig. 4.1 has five checkpoints 
enumerated 1-5. The remaining lines in the network are 
denoted by the numbers 6-9. All single faults ol —0F2=0; 
3-0,4-0,6-0 and 7-0 are undetectable. The fault 8-0, 
however, is detectable and any complete test set must 
Conteaineamtest Lor ithissfault. 

Piroughout this chapter denote 

De= set of all detectable single faults on the 

checkpoints 

U - set of all undetectable single faults on the 


checkpoints. 


Lemma 4.1: Let N be a fanout-free redundant network. 
If a test set T detects all single faults in D and all 
detectable multiple faults that consist of single faults 


from U, then T detects all single detectable faults in N. 





fa . " 
olyitium taslsvinps as ek sxedd Arowten sai nt $iye2 ay 


-@tqiogdosdis sig no etius® sidstossebau Fo paiteisaon SiGet. a 


netstoaseg L157 ofpnse £.8 


S& %02 Jse tees jlus? sipnie 6 patyiies enw 
eseat srestesnsp oF sgnsiotitvue tom @f t£ \Aaowssn sashes - 7 

-eontogquosnio sit no ative? olipnie sldsjostsb ils Jaeseb Sand 
(fs tossteb ton SHipke Yew ernds of Bbeviasb tee sesso ont 
-Atowisn ont ai etius? slenie slidstadégab 

10% .eAtowden soxrt-dwonst srsabtenep seai1l4 
Betaioguosds svit een [.bh .pkt ai deowtsa sd , Siqmgxe 
2t8 Afowten eds at seenil phinismss sat .2- Bedeusiiens 
,O-S,0-f aslusi sipnie ILA .0-a s1isdmun odd vd bedones 
Urs Jiuvet sat .sidssostebny sis 0-1 Bas 0-3, 0=h00e£ 
Jeum Js2 te93 stsfamos vas bn sldstseseb ef , tevewod 
-tius? eids tot Jeot s miadaes 
ajoneb zsdqedh ake suodpuoxit 

om3 SO atiusi sipnie sildssoets5b [fs te goes + a 


etn iogsoeds 


sat no ative? sipnie sidssoodebny [fe Jo ga =- ¥ t 





Figure 4.1 Network N41 
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PLOOt- Se hetel a bestie subser,of sl. thatedetects all isingle 
faults in D. If some detectable fault fi. exists that is not 
detected by T', then t. Can occur along only those paths 
that connect some undetectable faults on the checkpoints, 
say faults Eirfareees fn! and thesprimary output. (A icest 
that detects the multiple fault (£,,f£5,---78,) detects also 
fault tae since the two faults are equivalent. If T detects 
all such detectable multiple faults, then it also detects 


all detectable single faults in the network. 


BOtetne| network imeitigd. 4.0 (there are four 
undetectable faults on the checkpoints. Faults 1-0 and 2-0 
belong to the same equivalence class, and so do faults 3-0 
and 4-0. Choosing 1-0 and 3-0 to represent the respective 
equivalence classes, then the set U = (i —093—0)e0 faul tes —0 
is equivalent to the multiple fault (1-0,3-0). A complete 
single fault test set for this network can be generated 
by considering all detectable single faults on the checkpoints 
Bnomencm mult plestault.(1l—0,3-0))s. 

It should be noted that the result of lemma 4.1 also 
holds for all networks with fanout, where no primary input 
fans out. Fanout on the input should not be considered as 
true network fanout; however, it may be, in which case the 
result of lemma 4.1 does not hold as is illustrated by the 
following example. The network in PUG nena Cimlicsms to 
checkpoints enumerated 1-6. Test set (abc ,abc,abc,abc,abc) 


detects all detectable single faults on checkpoints. 
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eingle faults+1-1,3-0 and’ 6-0 are not detectable and so is 
any combination of them. The above test set, however, 

SOes  notecaetect rault 97-0 which is a detectable rault: 
Note that 7-0 is equivalent to the multiple fault 
(2-0,3-0,5-0). The undetectable fault 3-0 masks fault 2-0 
under test abc, and it also masks 5-0 under test abc. 

The previous discussion suggests that the following 
two approaches could be used to derive a single fault test 
Sec. 

if econstderesinglestaulcs, on all jlines’ in the 
network and generate a test set that detects all such faults 
that are detectable. 

gemeconsicersoniy faultsvon the checkpoints of the 
network, but derive a test set to detect single as well as 
multiple faults. Because any fault is equivalent to some 
Single or multiple fault on the checkpoints, such a test set 
will detect all detectable faults within the network. 

The second approach provides a solution to single 
and also multiple fault detection and it will therefore be 
employed in this thesis. A test set detecting all 
detectable single faults on the checkpoints (i.e. all single 
faults in D) can be derived by procedure 2.1. The set U of 
undetectable single faults on the checkpoints is obtained 
as a byproduct of this procedure, since if a fault p=0 sox 
p-1) is undetectable, there will be no OM (One) Menlry sl omene 


p-th column of the checkpoint covering table. In the 
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following section the problem of multiple fault detection 


will be examined. 


feel ples raul t Detection 


The presence of undetectable faults in redundant 
networks complicates the search for a multiple fault test 
set. Multiple faults in irredundant networks are of the same 
type, i.e., they all consist of detectable single faults. 
Whereas a multiple fault that occurs in a redundant network 
belongs to one of the following three classes: 

Class 1: only undetectable single faults occuring 
simultaneously. 

Class 2: only detectable single faults occuring 
simultaneously. 

Class 3: undetectable and detectable single faults 
occuring simultaneously. 

Multiple faults belonging to the above classes will now be 
analysed and a method that derives a Minimal multiple sraule 
test set will be described. 

In order to find a minimal set of tests that detects 
alleclass a multiples faults that care detectable, stars 
necessary to consider all multiple faults consisting of two 
or more undetectable faults from the set U. Ti hid Gees oie 
contains a class of equivalent faults, then the number of 


faults can be reduceé by choosing only one aul tec OsLeOGeselL 
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the class. A multiple fault F = (£,,f£5,---,f,), where 


nS Aaa 


1 greeerty are undetectable faults, is detectable, if 
there exists at least one term xX, (or um) which grows into 
Xi (or “ee due to F and the intersection X!.£ (or Cen) is 
nonempty. Note that the term x, grows duehtotRerf itndoes 
not disappear due to some fault ft. é F (see section 3.1). 
Now, let us assume that a test set T has been derived, 
that detects all single faults from the set D and all 
detectable multiple faults consisting of the single faults 
in the set U. Then any detectable multiple fault that is 
not detected by T contains at least one fault tL Swe Ohal 
the other hand if such a multiple fault is not detected, then 
f. must be masked. 
Let F = (£,,£5,---,/f,) be eumultiple fauleor 
Clase 2. Because all the individual faults E,rfor--- rf, 
are detected by T, F is not detected by T only if every fault 


fe iw) 2 ,& ..n, asi maskedaby, some Subtau lts.ot, Feaesahe 


? 
treatment of this type of multiple fault is the same as in 
the case of irredundant networks, and if such undetectable 
multiple faults exist, then the masking graph under test set 
T contains a strongly connected subgraph. 

A multiple fault that belongs to class 3° COnsistsuoe 
at least one detectable and at least one undetectable fault 


occuring simultaneously. Let F = (Lope rt Eaves tay) be 


Suche ay Laut, where fai imei iree pieeake undetectable 


tn 


fauresietand Sel Wye. telly (are detectable faults. A 
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test set T detects every fault fa; and also every detectable 
subfault of (Eopetgore se rf) > F will be not detected by T 
if every one of the detectable faults is masked. This will 
Neppensi feat least fonesot.thestollowing twol cases occurs: 

1. The detectable faults mask each other. Then the 
masking graph under test set T will have at least one loop. 
2. One or more undetectable faults mask some 
detectable faults, which, in turn, can mask other detectable 
faults. In this case, there will be at least one path in the 

masking graph, such that the initial node in the path 


corresponds to some undetectable fault. 


Provided that the number of undetectable faults is 
not very large, the approach outlined above can be used to 
derive a minimal multiple fault test ‘set with an effort 


comparable to that one required by irredundant networks. 


Example 4.1: To illustrate, a multiple fault test set 
will) be derived for the networkin fig.f4.3.4 The ESP forms 


of the network are: 


ESP(£) = 816 P2653 + a17f4 4 a,7d. + bo7cfy + bod, 
ESP(f£) = a16C 4s + bo 6c4d + 81705753 ~ c,c,d, = 
+ 446417297 + 8172726 


A minimal test set that detects all detectable single faults 
on checkpoints is derived by procedure 21. able Ay iand 
Table 4.2 are obtained by performing steps 2-5 of this 


procedure. From Table 4.2 test set T 
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Figure 43 Network N43 


Figure 4.4 Masking graph for network N4,3 
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TABLE 4.1 


Testing Table for Network N4.3 
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Fpl, 
T = (abcd, abcd, abcd, abcd, abcd, abcd) 
detects all detectable single faults'on checkpoints.*~ Fault 
6-1 is the only fault that is not detectable, hence U = (6-1) 
andi iT@also detectsaall classtad multiples faults "(there aretnot 
any)uconuNext!, the masking graph is constructed.; Term 
xX) = Ay 6P26F3 isinot’ checked forsgrowth®due®to literals a and 


b (see Table 4.1). For the term Xi = C3, the intersection 


TABLE 4.2 


Checkpoint Covering Table for Network N4.3 





i cues ye and the intersection Xy-X].£.T contains test 


abcd. This test detects fault 4-0 by checking for growth of 


“Ps ay 6C4ds and Y, = 26C4cs° Since both terms disappear 


Hucetottaule o-l) or fault (1-1,2—-1), G—-172-0 and (1l-1,2-1)/4-0. 


be 


The masking graph is in fig. 4.4, where the remaining masking 
relations have been obtained as a result of the unchecked 
growth of Xo and Xy- In tigw4.4, taultel=0 1S ecnOCen eco 
represent the equivalence class (1-0,2-0) and fault 3-0 


represents the equivalence class (3-0,6-0). The masking graph 
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eZ 
does not have any cycles, but there is a path starting with 
the undetectable fault 6-1. This fault masks fault 4-0 and 
test set T should be enlarged to detect the multiple fault 
(6-1,4-0). Because no xX. term grows due to (6-1,4-0) into 
Xs such that X!.f # g, and the same is true for all He terms, 
fault (6-1,4-0) is not detectable and test set T detects 
aliedetectable faults in the network. This example also 
shows that a detectable fault in a redundant network may 
become undetectable in the presence of some other undetectable 


revel el tees 


It should be noted that the number of undetected 
Multiplestaultes!iswlarger when the paths in the masking graph 
are longer than those in fig. 4.4. For example, consider the 


Masking oraphean fig. 4.5, where ft, is an undetectable fault 


and £o,f3,---,f, are detectable faults. Any multiple fault 
F = (fprtp gprs fem)? where k > 1, m <9 n—-k) sand@any 
multiple fault Fes (E,rfgreeer Ernortprtgg ire?) is detected, 


since tf. is not masked if fy does not occur. However, all 


the multiple faults (f,,f,), (£,,f5,f3),-+-) (£,,2 Py ieee 


2 ae n 
are not detected and the test set must be enlarged) to decece 
all such faults that are detectable. In addition, provided 
that the masking graph has more than one path and/or loop, 
there are undetected multiple faults that correspond to 


combinations of these simple cases. Because no Line ene ne 


network can be s-0 and s-l at the same tome yea alimit is) placed 
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Figure 4.5 An example of a masking graph 
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on the number of such faults that must be practically 
considered. 

The following procedure can be used to derive a 


minimal multiple fault test set for a redundant network. 


Procedure 4.1: 

1. Evaluate ESP(f) = UX. aie, WS) = Bh 

2 pror each Xs and oe term compute all terms Xi 
and 24 that are one variable less. For each Xe and v4 term 
compute Z, = X!.f and W = Yi.£. 

Bee Or any. Za or Vien term that is empty, repeat 
step 2 with the corresponding Xs or ua term. 

40) Find a minimal covering MC of all the zy and ne 
terms generated above. 

5. Construct the checkpoint covering table, where 
the column headings are the checkpoints and the row headings 
are the members of MC. The entries are filled in according 
Comlemmame ee eo and 2.144 \From this table find the set U 
of single undetectable faults. For each class of equivalent 
faults in this set, keep only one fault to represent the 
class. 

CE OLIIs chlemce ce Gy Ofvall classelemultiplesrautts 
that consist of single faults in the set U. For each fault 


FeG add a new column to the checkpoint covering table 


ae 


and fill the entries in this column. Li soOmewtaul lel SsenOG 


detected by any one of the tests represented by the row 
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headings of the table, mark this fault as undetectable. 
/peer com Ghrse@table ;fseleetta mingmaletestmsetet 


that detects all detectable single faults and all class l 


i 


Multiple Lablts@that@aresdetectable.* LT£LGT = MC, stop. 
Se. uUse procedures3.2 togconstruct the masking 


graph and from this graph find the set G, of all multiple 


2 
Paulcesecnateare not detected by I. For each fault Foe G, 
add) a new column to the table and £ill in the entries, but 
for onlyethosesrows that do not belong to T. 

Cem OMe the table eecce Gem MiimalmeeesStescuat. 
that detects all detectable faults from Go- The multiple 
PaAuLCeteSeeset Ta == eal are 

The minimal covering MC derived in step 4 of the 
above procedure represents a test set that weakly checks for 
growth of all Xs and Y, terms. By theorem 3.4, such a test 
set detects all detectable faults in the network. Therefore, 
any detectable multiple fault considered in step 6 and 8 
must be detected by some member of MC. Provided that MC is 
eel maiecovering Of) tie Zh and Mh terms, then the test cer 
Lo generated by the above procedure will be a Minimal testesec. 
However, there may be more than one minimal covering of the Zh 
and ne terms, and to prove the minimality of Ta 1) woulda be 
necessary to show that the length OF i is independent of 
the choice of the minimal covering. This is rather di tr cule, 


but practice indicates that a minimal test set is generated 


in every case. 
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Bxamples4 32:2) Procedure 4-1) will be used to derive a 
CeSstwsetelore thie networkeine Lig. 4.6. §The ESP) forms ‘of 
this network are 
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TABLE 4.3 


Checkpoint Covering Table for Network N4.6 





The Ze and We terms generated in step 2 are 


Zy 3 abcd, abcd, abd, bcd 


Wr ab(ctd), ab(ctd), b(c+d), (atb)cd, (at+b)cd, (atb)d 
Step 3 produces two additional Zh terms, acd and abc. A 
MiuninaiecoveringeMC of alt the Za and a terms above is 
MC = (abcd, abcd, abcd, abcd, abcd, abcd) 

Tenmam2e2.and) 2.0 are used to £11) the entries inj the 
checkpoint covering table (Table 453) SErome this teable 
it is seen that faults 2-1 and 4-1 are undetectable. The 


only term which grows due to both 2-18 and) 4-155 S (neg cenn 


= eee 
xy = a,b5c34,- However, for the term Xi A1C31 the 
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Figure 4.6 Network N46 
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intersection ac.f = g. Hence the fault (2-1,4-1) is 
undetectable. The following minimal test set T is selected 
from Table 4.3 

T = (abcd, abcd, abcd, abcd) 
Procedure 3.1 produces only one masking relation and this 
is (3-1,4-1)/6-1. This relation has been obtained as a 
result of the unchecked growth of the term X, = a eC aCe 
Because fault 3-1 is not masked, enenee is no need to enlarge 
T and this test set is also a minimal multiple fault test 


set. 


The inevitable price paid for the minimal test set 
generated by procedure 4.1 is the increased complexity of 
the computations involved, specifically when the number of 
undetectable faults is large. The minimal covering MC 
computed in step 4 of this procedure corresponds to the test 
set derived by the method of Bossen andsHongLi[5].. Obviousiy, 
the effort required to obtain such a test sete iseconsidernably 
smaller. On the other hand, there is a difference in the 
Jengeheer the test set generated. Denoting by 2 the length 
OL a Minima letesie ser TR as derived by procedure 4.1 or by 
procedure 3.2, and by ie thesiength ofethestestmser generated 


by procedure G[5], then the following comparison can be made: 
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From which the conclusion can be made that while the 
procedure is more complex it derives a smaller test set for 


some examples. 


4.3 Concluding Remarks 


It should be pointed out that in redundant networks 
the problem of multiple fault detection is more important than 
in irredundant networks. It is often argued, that detection 
of single faults is sufficient: provided that the time span 
betweenstesting is short.) This may-be true for irredundant 
networks, but it is not true for the redundant ones. For 
example, let N, be an irredundant network, N, a redundant 


I a 


network, and Ty and T. a single fault test set for Ny and No, 


respectively. For Ny the following sequence of events 
(fy occurs, T, applied (£5 removed) , f., occurs, T) applied) 
results in detecting fault ft, as well as fault f.. However, 


ile fi is an undetectable fault that masks some detectable 


Carte acer toot SEL T. in network No, then after the 


2 
sequence 
(f5 OGCCULS, T. applied, f. occurs, T. applied) 


N, may no longer operate correctly, but the network passes 


2 
tne test both timess 
It is felt that for this reason the problem of fault 


detection in redundant networks should never be restricted 


to only single faults. 
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Chapter 5 


FAULT DETECTION IN SPECIAL NETWORKS 


The test generation methods presented in chapters 
2-4 employ both the ESP(f£) and ESP (f) form when deriving the 
testeset.) in this chapter, a method which uses only one of 
the two forms to generate a test set for networks with 
equal inversion parity of all reconverging paths will be 
described. Some additional results for fanout-free networks 
Bvergivensinesection 5.2, andjan alternative way of 
generating tests is shown in section 5.3. Binal y, 3 cae 
problem of fault testing in multiple output networks will 
be discussed. 


5.1 Networks With Equal Inversion Parit Of ali Reconvergin 
Paths 


The set of networks with equal inversion parity of all 
reconverging paths (denoted networks with EIP) consists of all 
networks where the number of inverters, modulo 2;) alongeany —cwo 
reconverging paths is the same. In such networks any fault 
causes the growth of either xX; term(s) or Cem (5) sme ides 
is also true for any fault in a fanout-free network and from 
this point of view the set of all fanout-free networks may 
be considered as a proper subset of the set of networks with 
FIP. If the ESP form of a network with EIP contains a term 


aW, then it cannot contain a term aU: Thus, the set of 
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functions realized by networks with EIP is a subset of 


unate functions. 


b. Giigoing Letkaults 


Because the inversion parity of all paths connecting 
some checkpoint and the output of the network is the same, 
no fault causes both the disappearance of an Xs (or a) term 
and the growth of another xX (on ue! term at the same time. 
Consequently, if a test checks for the presence of a term, 
then it detects all faults that cause the disappearance of 


the same term. Lemma 5.1 states this result formally. 


Lemma 5.1: Let N be a normal network with ESP(f) = ux, 
and ESP(f) = as If a test t checks for the presence of 
tees cteriimda.. b Weandethe inversion, parity oteall 

Vals 6 Cole sie pra ces) 


reconverging paths in N is the same, then t detects the 
following faults: 

~ s-0 and s-1l faults on checkpoints i and p, respectively, 
—~ s-0 and s-l faults on checkpoints k and r, respectively, 
provided that the inversion parity along the path 

aly mor. (ss en Go cee) is even, 

—'s-l) and s-0 faults on checkpoints k “and r, respectively, 
provided that the inversion parity along the path 
it, a. PaECD Payee. 2/r )Maspoddy 

Test t also detects faults on all checkpoints associated 
with literals in W. The type of fault is determined as 


described above. 
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Proomemelte test t Checks for the presence of some term, 
say X,, then t is contained in the intersection X,. Il x. and 
the output of the fault-free network under input t ae , ie 


ae ca we ti occurs, “such tthat £ 7X 0, then the output of 


1 
the network is 0 because t is not covered by any xX; term, 

and no x term can grow due to fi because of the EIP property. 
Hence t detects any fault that causes the disappearance of 

Xue It was shown in chapter 2, that for a normal network 
such faults can be determined from the type of literal 


(primed or unprimed) and the inversion parity along the 


Dalticu lar: patin. 


If a network has an irredundant ESP form, then it 
is possible to check for the presence of every Xs or every 
a term. A minimal test set for such networks with EIP can 
be generated while using only one of the two EForms:. ernie 


following procedure summarises the necessary steps. 


Procedure 5.1: 

1. Evaluate either ESP(f) = UX, or ESP(f) = The. 
(In steps 2 to 6, it is assumed that ESP(f£) is used). 

2. For every term X, generate all terms Xe Cie uarcisc 
one variable less. For each Xi compute Zi = X1.£. 

3. If there exists some X. term having more than 
one 4, term that is empty, then repeat step 2 Wi cimuhose Xi 
terms having 2Z, terms that are empty and common checkpoints, 


k 
by by removing the variables with common checkpoints according 


£8 


\2isd 9mon to sonszarq sie 19013 exeedo F tear 21 





bne * iT +,% Sotsocatstatl es at benissinos ef o aedt 4 ot We _ 
Oe LT P 
3i 6.f ef 2 tugnt wbay AsxOwsen soexvt-tius? oes to Sugqsus ont ZY, 
to Sugino Sid nade .0 + %: 7 dad dove ,amyooo Qo sivet & _ 


TIS, ,.% yas yd bsteves ton et 2 savssed 0 ei Atowied eae — 


VItagexrg GTS sett to seuysoad fis Ot sub wotp ass mre? 7" on Sas Ss : 
TO soasmssqqsaihb sds esevso jedd tigB? yaw agooteb 2 eons a) 
Axowion Ismxon s xot tjsdy Ss rstgded> ai mwede esw aT +a 
Z 
[faxej3il to says sofa moy2 bentmiedsb od neo ation? fiove ae 


sa3 pihols ytiasq nofaxsvat sais bas (Somiugay 10 hestiag) 


-djsq tsluotiueg 


ai . ve ry, wy ° ' 
Jf “9ns ,miel Ged insbtvbsagi as sen Arowsen ss aI 
{teve 10 4 YIeVS tO sonsestyg Sad aot Sosho of oldiseog ak 


m9 Vid mitw edsyowisa rove xO2 Jor Soed Leninim A “ees t* 


Sit  ,emrot ows stlt-2o sao vine patay slirw bstsussep ed | 
-29978 Yisnete09n sis ase txsaie S1UR290%q paiwoLtod eee 

tA 1c Sapbevoeg 
-¢¥8 = (3)4ea x0 pes = (3)4eg isdiia Stsuleva .£ > 7 
(Sau et (3)984 teat bomtaen et Si 42 OF E eqete at) 7 


S16. t5d3 Be matey iis stsisnep as anes yaeve _ of . — 





83 
to lemma 2.4. 
se tle Seen 
ifa 
Veet Osan iinceecovert ng = MGwoi tal aaie Zy and 


4. For each term XY compute ne = X 


Mee terms generated above. 

6. Construct the checkpoint covering table where 
the column headings are the checkpoints and the row headings 
are the members of MC. The entries for rows that cover the 
Zy terms are filled according to lemmas 2.2,2.3, and 2.4, 
and the entries for rows that cover the en terms according 
Oe Ciitamo-. Lt. 

7. From the checkpoint covering table select T. as 
a minimal test set detecting all s-0 and s-l faults on 


checkpoints. 


The above procedure generates a minimal single fault 
test set for any network having either an ESP(f) or ESP (£) 
form that is irredundant. The minimality and completeness of 
the test set with respect to faults that cause growth Of 
xX; terms follows from the proof of procedure 2.1. Provided 
that the ESP(f) form is irredundant, it is possible to check 
for the presence of every xX; term and therefore a test will 
be generated for any fault that causes some Xs to disappear. 
A test ty that checks for the presence of the term Xu detects 


aAeecaueesoecliat Cause Xo to disappear. A test tor SuChmuUnac 


eee Monee. Feet yall X. detects only those faults causing 
2 meas ae a 
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disappearance of XK, as well as Xer imew, faults, on only chose 





£8 
-&.$ 






x H ..X = OW eeuguoo *% mist dose 10% «Ft 
brs sit .f[Is6 to OM prtzeves Leaking @ baid .z 
.aVvods betsezscep emyes- Pal 
Itenw gides piLeisveo ddiogtosdo: sit Souvdeno> .2 + 

eptibpsil wor ont bas esnpoqdostis old sas @pniieen amidios afd) ee 
ait 19veo tent ewor tot esizttas sa? ..D¢ te aryednem ede 915. 
,¢.S5,8.8 esmnaf o2 parbtesas Belit3 sis eaves rs 7) 
enibioons amiss W sii xsvoo tend ewer aod esizine eft bas 7 
-l.? smmel oF 7 

too5lo2 ids3 ptrisvon tniocedAosis say moss. Ff os 
etiuse? I[-2 Sas Ose Ils prttosseb tap gees Isminim 5 


,2inbogasario 


; 

tius? sipnie Isminatm 5 éstsx28hep sivbsco0r1g evods sht 7 
(2) 923 20 (3)983 ns tsdtie priven aAvewsen YAS %ol 39a Jeez 

sO sfansisigmod fas yvolismimen off iisirubesst ef Serid mtoz - 

20 dtwou> seuad tars extwe? og tooqesx.mciw joe sued ye 7 

Hepivert .i.S suvhsonrg, 26 Tooxg silt mot? awollo? saved Pie - 

ased5 of. sidizeoq ei 3i \teebachbx1t &i axot (3) Gea ede duds | 


or 
iliw tess s sxo3exers bas ass 3% YRSve Jo eonsaerzg ent + ie 


eens: ou es SiMOR SOSDRS dors ) Rane yas 4o2 f aap act 





oF > V6 ie 


* errs nel - 


84 


checkpoints common to Xy and Xe. Thus, by generating tests 
that detect the largest number of faults it is ensured that a 


test set with a minimal number of tests will be derived. 


A complete test set for networks that do not have at least 

one ESP form that is irredundant cannot be, in general, derived 
by the above procedure. However, if every checkpoint is 
associated with at least one term X, such that X,. Il xX. ZO, 
then the above procedure can be applied and it eae 


aA Minimal test set. This is illustrated by the’ following 


example. 


Example 5.1: For the network imo cig. Se. che Hout) form 
is 


ESPif) = re eae de tebe + bad, 


Sa Sees WEG RM (5 


Steps 2-4 produce table 5.1 and a minimal covering of all 


the Z, and W_ terms is 
k m 


MC 


(abcd, abcd, abcd, abcd, abcd, abcd) 


From table 5.2 a minimal single fault test set T is 


iN (abcd, abcd, abcd, abcd, abcd) 


Because T checks strongly for the growth of all x; terms, 


domaleomdetects all multiple faults. 
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Figure 5.1 Network N5.1 
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DARE. 


Testing Table for Network N5.1 





TABLE 5.2 


Checkpoint Covering Table for Network N5.1 
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Do l2 Malbiple Pawlts 


In the preceding section it was shown how to derive 
a minimal single fault test set for networks with EIP from 
Onbvyeoners OLethe two ESP forms. In general, it 1s ditticult 
to perform a complete multiple fault analysis without using 
both the ESP(f) and ESP(£). Provided that is is possible 
to strongly check for growth of all terms of the particular 
ESP form being used, multiple fault analysis can be avoided 
and a nearly minimal multiple fault test set can be derived 
directly. In the special case of a network with EIP, it is 
Sutficient, to f£ulftill, conditions’ that are less stringent. 

The set of all single faults in a network with EIP 
is partitioned into two blocks A and B: 

A = set of “all faults causing growth of xX. terms 

B = set of all faults causing growth of “ terms. 
It follows from theorem 3.2 that any fault fo € A can be 
masked only by some fault th € B,and vice versa. Now, 
suppose that a test set T aetects all single faults minga 
network N with ESP(f) = 2X, and ESP (f£) = ZY,. If some 
multiple fault F exists, that is not detected by Toy F must 
contain at least one fault f. € A and at least one fault 
fh eB, since two or more faults belonging to the same 
set cannot mask each other. Consequently, there must exist 


at least one term Xe that grows into Xi where 
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Xi.£.T, aa) D 
teense x ¢ 


and at least one term “a that grows into Xs where 


mae = g 
and Y¥i.Y.E. tT. #¢ (522) 

The test set Me detects all multiple faults if 
SLene mon) ) mOOeCSENOLsNOlLdsLOnmany, X5 Pern Olas bee Or 2b) 
does not hold for any ae PernumeNote stilata(5.L) Or so .2) 
does not hold if at least one of the two equations is not 
satisfied. 

The above fact can be exploited when a multiple 


fault test set is to be derived. As an example, consider 


the network in fig. 5.2, where 


ESP(f) = a5 7b5703dy + Ai ghog 5d 
Test set 
T. = (abcd, abcd, abcd, abcd, abcd, abcd) 
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asovaaminimal single faultstest sec. T does not check for 


growth of Xy questo variable sb, and ror Orowtl or Xo due to 


Variable a. However the intersections 


X!X -£.7. = abcd(abcd + abcd) d 


eae: 


abcd (abcd + abcd) = ¢ 


> 
> 
Ht 
4 
i 


are empty and hence T. also detects all multiple faults. 
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Figure 5.2 Network N5.2 
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5.2 Multiple Faults in Fanout-Free Networks 


In section 3.1 an example was given, where a single 
fault test set for a fanout-free network does not detect 
annULEUD loeraultor mustiolicity live: = cimitarly,. for the 
Networkein fig. 5.3, the test set T. 
ve = (abcdeg, abcdeg, abcdeg, abcdeg, abcdeg, abcdeg) 
does not detect the multiple fault (2-1,4-1,5-0,6-0). The 
Mudcrolicicy of this ftaulteils four. However, it will) nowsbe 
shown that any single fault test set for a fanout-free 
network detects all multiple faults of multiplicity two and 


three. 


Lemma 5.2: Let N be a fanout-free network with ESP(f) = rx. 
andeuse(f)n= iia vealed no two checkpoints appear together 


within both a single Xs and a single te term. 


Proof: For a one level network realized by a single NAND 


gate with p inputs hy pre hes the ESP forms are 
ESP(£) = hy a hy ae ae ae Bs Ways Sh) 
ESP (f) = Uppity oat (b54)) 


Without loss of generality, the above equations can be used 
to represent the ESP forms of any one level network, since 
for any AND, OR, or NOR gate with p inputs the ESP forms 

are similar to (5.3) and (5.4). The lemma can now be proved 


byeinduccion. 
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Figure 5.3 Network N53 
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(a) Clearly, for any one level network no two checkpoints 
appear within both a single Xe and a single ¥, term. 
(b) Let N be an n-level fanout-free network with r checkpoints 


Iwi «a pyeond Let-thes ESPi forms ofsNgbe 


ESP.(£) ix, (558) 

ESP (f) = TY (569 
By assumption, no two checkpoints of N appear within both a 
Single Xs and a single v4 Perm Debi mand elo ..o) ee LetaN: 
be an (nt+tl)-level network obtained from N by replacing the r 
checkpoint variables with r gates Gy 1Gore+- Gs Let ESP (g, ) 
and ESP (g,) be the ESP forms of the network corresponding to 
gate G., for Kisely 2ee lyr om tneshsPa formsaf orathesnetwork 
N' are obtained by substituting ESP (g,) and ESP (g,), for 
Poel epee ty 1NcOeM Oe Sand 4(5e6) a. Eat follows from equations 
(5.3) and (5.4) that if two checkpoints appear within both a 
Single Xs and a single = term, that they must have done so 
ine oae wands (544), whichsasta contradiction. Hence no two 
checkpoints appear within both a single X5 term andvassingle 
Y, Erm. 

It should be noted that the result of lemma 5.2 
may not hold for networks that contain other types of logical 
gates than AND, OR, NAND, NOR and NOT. For example, for 
an Exclusive-OR gate with two inputs, a and.b, the ESP forms 
are 


ESP (£) 
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Here, two checkpoints appear within both a single xX and a 
Single ae term. Networks which contain such more complex 
logical modules should not lke considered as fanout-free, 
since a practical realization of the module is likely to 
contain fanout (see section 1.1). The following theorem 


has been proved by Hayes [18]. 


Taeoreneoels, Any Single fault test set oS fLoreas Lancuc— 
free network also detects all multiple faults of multiplicity 


two and three. 


Proof: The theorem will be proved by showing that no 
two or three single faults can form a closed masking graph. 


(qyeeeGonsider the multiple fault F — (f,,£ beta fault & 


Ee 2): i 
be detected by a test t which checks for growth due to fi of 


some Xs term, say Xi: In the course of this proof we shall 


simply write £1:X me xX) instead of "fault fi is detected 


byecest. te T. that is contained in the intersection x1 .£, 


A mw 
where £iiXy ais xX : 


° ° t 
Le £o/f,, then f.: X, ? 0, consequently f.: Y5 7 Y5 


Tete coyechen inet at 0. 


pi 1 2 


Fault ft. cannot mask fault ft. however, because fy and f. 


are faults on two different checkpoints and they cannot 


appear together within both xX, and Y. (lemma 5.2). 


£e 
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(b) Consider the multiple fault F = (£,,£,,f£3) 
Let fi: xy roaxe 

debe £,/f,, then f.: Xy Oye anid f.: Y. > Ys 

Tt £,/f,, then f,: Y, ce 10, thatel f.: X, a X34 

line £,/f3, then 1: X3 >TO peraric f1: Ya Ss Ya 


The last statement is a contradiction, because no single 

fault in a fanout-free network can cause growth of some x; 
as well as some Y, term. Since aT causes growth of Xi fi 
cannot mask £3: Hence, if test set T detects all single 
Paultoereealso detects allemud tiple faults of multiplicacy 


two and three. 


A single fault test set sins for a fanout-free network 
also detects a large portion of multiple faults of multiplicity 
greater than three. If two or more single faults foceur that 
belong to the same class of equivalent faults, then all such 
faults can be represented by only one fault. Hence T will 


also detect any multiple fault F = (f,,f -/f)) such that 


a 2 ae 


Carle ser. , 2 fn do not belong to more than three different 
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5.3 Test Generation for Large Ci rcuLes 


For large circuits, the number of terms in the 
ESP form may become very high. Thus, although the use of. the 
ESP forms for test generation is desirable, specifically for 
the purpose of multiple fault detection, the test generation 
methods described earlier may not be feasible when the 
network is very large. Also, it is often required to derive 
eestceroreonily certain faults, Or to Lind all tests which 
G@etectearparticular fault. A method that can be used an 
such cases will now be described. 

We denote by p-d the fault "checkpoint p is stuck at 
Gumewnere-d1s 0 or 1, bute not both atSthe same time. A 
fest bt detects fatit p-d, if, under input t, the output of 
the correct network is different from the output of the 
network in the presence of the fault p-d. Let £f(p-d) denote 
the output function realized by the network in the presence 
of fault p-d. Then the set T(p-d) of all tests detecting 
fault p-d- 1s: 

T(p-d) = £(p-d) ® £, 
where f is the output of the correct network. 

Let Z be the Boolean expression describing the 
function realized by the network. For each checkpoint of 
the network, there is a subscript attached in the corresponding 
position in the expression. For example, for the network in 


big wip. 4athis expression ais 
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Since the logical value on checkpoint p is the presence of 
fault p-d is d regardless of the value of the variable (s) 
applied, f(p-d) can be obtained from @ by Subst reubing «dd .OG 
any literal or subexpression that is associated with subscript 
Deine Contrasts LO che evaluation of the ESP form, all the 
Boolean identities can be used when computing f (p-d) £ YOM. 
It should be noted that when the notation above is used, the 
range of a NOT operator may not be Cetinedsproperly .ae) Ob 
example, when computing £ (10-0), it may not be clear whether to 


substitute 0 for the expression da or for the expression 


C456 

c,d,e,- This can be solved by using a special symbol 

(e.g, “—") andiby including parenthesis to define the range 

of every operator. The previous notation is satisfactory, 

however, provided that a diagram of the network is used at 

the same time. This latter solution will be employed herein. 
Assuming that f is the function realized by the 


network, then the set T(p-d) of all tests that detect fault 


p-d can be computed in the following two steps: 


Procedure 5.2: 
1. Compute f(p-d) by substituting d into Z for any 
literal or subexpression that is associated with subscript p. 


When evaluating f(p-d), disregard all subscripts and use all 


Boolean identities. 
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Figure 5.4 Network N5.4 
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2. Compute T(p-d) from the formula: 


T(p-d) = f(p-d) @ £. 


A nearly minimal, or a minimal single fault test set 
for an irredundant network is obtained by: 

- form the set S of all s-0 and s-l fault test 
checkpoints, such that every class of equivalent faults is 
represented in this set by only one fault. 

- compute T(f,) for every fault f. Ee Ss 

- find a nearly minimal, or a minimal covering of 


all the T sets computed above. 


The extension of the above method to redundant 
networks is straightforward and it follows from the discussion 


Poesection 4.1. 


Example 5.2: The network in fig. 5.4 realizes the 
function f = ab + c + bce, and the output expression Z for 
for the network is 


203° (44526) 19) - ((egdeeg) 11+ (byeg) 1 a+ (bye 


To compute T(1l-1) evaluate £f (1-1) 


ie = (a,b 3) 12°29: 


f(1-1) = (1.bc.cde).(cde.bc) + bce = 


(b+ct+tcde) . (cde + btc) + bce = c + bce. 


Hence Mill) = (c + bce) @ (ab + c + bce) = abc 
SiiiguawlVem i the presence, Of the muiiliplestoulous 4 oy 


the function realized is 
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Midi lie a(abe.(lede)) mel ba) + bees 
=ab+c+ bde + bce 
Ti4-ill-1) = (ab + ¢ + bder+ bce) @ (ab + c + bce) = 


= abcde 


Although the above method can be used to generate 
Pectsme! GOmaspeciticamultiple faults, it is more difficult 
to generate a complete multiple fault test set, unless. a 
large number of multiple faults is considered. Relative 
to the D-algorithm [41], this method will generate a test 
for every detectable fault with a computational effort that 
compares favourably. In addition, provided that a minimal 
covering of the T sets is selected, the resulting test set 


TuSeminimal.: 


5.4 Multiple Output Networks 


The problem of fault detection in multiple output 
networks is not substantially different from that in 
networks with a single output. A test set for a multiple 
output network can be obtained by generating a test set for 
the circuitry associated with each output separately and then 
talkingmethewunion jof eallpesuchstestseas the test set Tor the 
multiple output network. However, the test set derived in 
this way is not likely to be minimal. In order to obtain a 


minimal test set, all the outputs must be considered at the 
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same time, 


The ESP form of a multiple output network is the 


union of the ESP forms for Sverveindividuals output. sthe 
test generation methods described earlier can be used for 
multiple outputs without change, provided that they are 
applied to this "composite" ESP form. This is demonstrated 


by the following example. 


Example 5.3: The’ network in fig. 5.5 realizes two 
functions, g and h, where g = abcd and h = cd + bc. The ESP 


EOrnsw are 


ESP(g) = ajboc, ogg + bz 7°4 725 946 9 

ESP(g) = ajb, 7 + ajcy 7 + Bob, 4 + Boey 7 + Cog + AG g 
ESP (h) = Cy 1946 49 + 53 goq g 

ESP(h) = Ce 193 9 + Ss 10%a,8 + 93,846.10 + C4846, 10 


To generate a minimal single fault test set, procedure 2.1 
is applied to the ESP forms above. Steps 2-4 of this 
Poocecaune produce Table 5.3. —~From this table, a minimal 
covering MC of all the Z and i terms is 

MC = (abcd, abcd, abcd, abcd, abcd, abcd, abcd, abcd) 
After the checkpoint covering table (Table 5.4) has been 
filled in, it is discovered that the network is redundant, 
becausemiaultc J<l 1s not decectable ty tines testeceu 

T. = (abcd, abcd, abcd, abcd, abcd, abcd) 


is a minimal test set that detects all single detectable 


faults. Procedure 3.1 is now applied to determine whether 
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Figure 5.5 Network N5.5 
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there are any multiple faults that are not detected by Ts: 


TABLE 5.4 


Checkpoint Covering Table for Network N5.5 


x~ MM MM 





Term Y, = bob, . (of the ESP (g) form) is not checked for 
7 
growth due to literal b. The intersection P is 
= q V a = 5 
2 Y¥3-Y3-9-T, abcd 

Test abcd detects faults 2-1,4-0,5-0,6-0,7-0 and 10-0. 
Piewonly masking relation produced is /-1/4-0, since all 
the remaining faults are detected by checking for the growth 
of terms that do not disappear due to fault 7-1 or 3-l. 
Because of the unchecked growth of the term X, = b Cc 

2 35 004 6 
(of the ESP(h) form) it is also found that 4-0/6-0 and 
4-0/10-0 under test abcd; however, both 6-0 and 10-0 are 


detected by two additional tests. Test set T. is now 


enlarged to detect the multiple faulGen/—1) 4-0)% 
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Term ey ey fs grows due’ to this fault into pang where 
b.h = b(be + cd) = bed 
Thus, test set 


Tey = (abed, abcd, abcd, abcd, abcd, abcd, bed) 
is a minimal test set that detects all detectable faults 


in, Ehisenetwork. 
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Chapter 6 
SOME BOUNDS ON THE LENGTH OF A MINIMAL TEST SET 


With the increasing size of hardware being built, 

Mee omUO CEO MymiMpOLcCanGetOuminim)2esany soaLLLCcular Circuit, 
HUUBLeETSCeAlSONnVital to keep the cost Of fault diagnosis as 

low as possible. In this chapter a lower and an upper bound 
on the length of a minimal test set for irredundant circuits 
will be derived. The problem of how to design circuits that 
require short testing procedures will also be discussed. 

Let &(T.) denote the length of a minimal single fault 
test, set To: For any irredundant network with p checkpoints 
ine must detect 2p faults. Obviously, Ts Cannot contain Jess 
Dianecwo cests ,) since no single test can detect both a s=0 
and <-1 fault on the same line. On the other hand, 2f every 
fault should require a different test, Ge) would be equal 
to 2p. These bounds, however, are quite rough and can be 
improved considerably. For networks consisting of AND, NAND, 
OR, NOR and NOT gates, the following two factors have great 
influence on the length of a minimal test set eye eeqn ike 


detection: 
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1. All faults that belong to the same equivalence 


class are detected by the same test. Thus, one test is 
Surticrent to detectes=0 faultsvyonealivinputs of an AND or 
NANDegate;) and similarly only one test 1s sufficient (to 
debectece etaults On val leinpurseot an OR Or NOR gate. 

Zen Certain Laulvus Cangnevyer be detected by the vsame 
test. Faults of this type are nonequivalent faults on inputs 
of the same gate. For example, an AND gate with n inputs 
requires n different tests to detect the s-1l faults on all 
fpputeledads. oimilarly jean n-=input OR Gate snecds n dattervent 
wnputecombinations to detect. the s-0 faults. TC should be 
pointed out, however, that two faults that belong to two 
different equivalence classes may be detected by the same 
test. For example, one test may detect s-1l faults on inputs 
of several AND gates in a two level AND-OR network. 

The above discussion and most of the results presented 
in this chapter do not relate to networks built from other 
types of gates such as Exclusive-OR gates. It can be shown 
blolee thateallusiangle faults ineany.trec network consisting 
of only two input Exclusive-OR gates can be detected by four 
tests, where this number is independent of the size of the 
network. Unless otherwise mentioned, only networks that 
contain AND, NAND, OR, NOR and NOT gates will be dealt with. 

Now consider irredundant fanout-free networks, or 
networks where fanout is present on the primary inputs Only. 


Let N be such a network with p checkpoints. Any Single fault 
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test set)» for N must detect 2p faults..y Denote these faults by 


AS ay Roepe 


1! griareees eee where fy is a s-0 fault and fy isa 


sie faultvon checkpoint Kip or vice versa- 


iY 


fLemmar6.0:" Let fi and ft, be faults on any two checkpoints 


OLwan Canout-tree network.) eltet, and £. are detected by the 


aL 2 
same test, then faults fi and fs cannot both be detected by 
the same test. 
Proof: In a fanout-free network, faults are detected 


by checking for the presence of xX; OG Y, terms. Let fault 
fi cause the disappearance of one or more X, terms. I€£ ft, 
can be detected by the same test as fie then there exists 
at least one term xy suchechac Xu disappears due to fi as 
well as due to f.- Because ti causes the disappearance of 
an X term, fi must make some ae term zero. Faults fi and 


fs can be both detected by the same test only if there exists 


at least one Me term that disappears due to both fi and fs. 


Faults ti andmee. eons bau es f., and £1, respectively, are 
faults on the same checkpoints. It follows from lemma 5.2 


that ti and fs cannot be detected by the same test. 


An input limited fanout-free (ILFF) network is 
defined to be a fanout-free network where the primary input 
fans out. Fanout-free networks where no primary input fans 
out are sometimes called tree networks. Bounds on the length 
of test sets for tree networks have been derived by Hayes 


[18a]. Theorem 6.1 specifies these bounds for ILFF networks. 


BOL 
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Treonem to. Us Cert a isaminimal single fault test set 
for an ILFF network with p checkpoints, where p > l, 


then 


8) 


Proof: The lower bound will be derived first. The 
test set T for a network with p checkpoints must detect 2p 


faults, denoted f a if ane Suppose that r 


14 p 
tests tyrtoreess tL aren sufrrlcrenteto detect Eaults 


by) EES BEES Let qs be the number of faults detected by the 
test ty, and t. detect faults Eyrtgreesrtaie COre Hs eee oe 
Tt follows from lemma 6.1 that faults Eqrtgr tee tag must be 


detected by qs different tests. In other words, &(T.) 


cannot be smaller than 
c 


ie 4p GUNES (dy rAgreee 1G) s where 421942? 
R(T.) will be minimal if each of the r tests detects the 
same number of faults, which is E. Hence the lower bound is 
given by the minimum of the function 

iG) st = 
This function has a minimum for r = Vp, since 


Ghai Gs) an fr ee 


ho) = aap 


Hence, &(T.) Sxiiey ai 8 coe Hele 
Vp 


Now, the upper bound will be derived. T. mist detect 


2p faults. However, (qt+l) tests, rather than 2q tests, are 


eo! 



















toe teot tfiust olpnta Isminins ef o 22 


q% > (2 ee 


eit ,davtit bavixzsb od Liftw bowed seawall aly -s0onF 


aS toedeb datim eidioqtosdo q diiw Atowisnis Bor 2" toe jess. 
a 7 ru 


i werencsign tpiagt bentddieb o3teae 


I Vans seodquc ae a 


g 
at{ie? jgosdeb oF Jnsiosctive sis +? trerngty eZ asess 


ont yd Bbejnsyob etlust to xedmun-eds sd 3P ts.J tqi\ + *ig tae 


te: setae try? etives? toatob ed hrs vy? Jasd 


+,'2 edflost? gets £.3 smell mort? ewoltot® 21 


| | 


£ 
(.T)? ,@htow zedto al Jedast? jaste®ich yP yd betoedgsb 

; 73 
esis isilame sd Joanss 

gs ;P pd: Ss *ornw ‘ (Ps ** «eR y?) xem + 
Sis e20eteh esfesd 1 old Zo doses Ti Lamiaim sd Lliv (Te ; 
at Bavod aswol sit sons 2 ai doidw ,stloat to x9dmun omee, - 
as 1 . 


4°0¢ 


noftonE? oft to muninim eds yd ser 
4 +i. (x)a Mg 
Pe See ; 
evéte .aV =-2 to2 ie A 5 asi tottonu® “~ 


aq - 2 2 (aya 









= 


Me 





110 


SUEEIClente to detect, theszq. faults on) checkpoints that are 
DnouULCSmtOmtnessame gate. ss hus, -at)mostures: p tests) will be 
required, where r is the number of gates such that all 
inputs of the gate are checkpoints. Note that if all inputs 
of some gate are not checkpoints, then the equivalent faults 
on its inputs are detected by some test for the former. For 
any network with p checkpoints, where pi >}l,—rpeis at most 


E. Hence &(T.) <p+P=p. 


The network inificuuao.l has a minimal test set that 
consists of eight tests. This is close to the upper bound, 
since 3 p= 5 > 6 = 9. A Minimal test Set T. for the network 
ime amOne es cONtLdI NS fOULsLeSsts 

iN = (abcd, abcd, abcd, abcd) 

The length of this test is identical with the lower bound, 
since p = 4 and De = th, 

The upper bound can further be improved. It is con- 
jectured thatthe least upper bound is p + Tog5p . However, 
the author has not been able to provide a rigorous proof 
(Appendix B). The results derived above are valid for 
fanout-free networks, or networks where only primary inputs 


fanout. The bounds for the general case of networks with 


internal fanout will now be derived. 


Corollary 6.1: Let N be an irredundant Single ourcpuc 
network with p checkpoints that can be decomposed into k 


fanout-free subnetworks Ny Noree er Ny- Let Pj be the number 





olf 
216 t6d4 esntogdosilo fo alivet py say aosceb od tasiobiiue 
sd Iljw eseat? gq + x taom 36 ,eviT ,sdsp emse ot of aduqak 
iis tedt fiowe estsp to zedmya eff ait 2 setenv bot iwpax 
etuqni tls ?i 3t5x3 sdJ0K .e@tniogadsedo eis etap siz To etugat 
aejivuet tneslaviups sad mers yadntogkneds Jon Sts step smoe 20 
rol 806. w8T62 sdt not tess iets yd besoeteb sys sduqni adi no 
teom t6 ei + .I < ¢ stsdw ,astmiogsosia g nsviw Aszowlsen yas 


a | é 
Ge -etea (773 sonsh 2 


Jsa3 193 vees lamini’ 5s asad 1.@..pit SL AROWOR sat 


,onved wsqqu sas oF gaglo ef etal. .adesd 2hetse So etaeranoe 
Atowsen off toi lac teot lLamiaim A g@=da £ = 2 esonte 
4 i o iw UZ - J ey... 4 BOL 7 ‘ F CQ bs = 

: st2o3 wot agisstaoo £.3 .pi? ok 


(bods ,6008 bods Bods) = 2? 
,onmuod tewol sis djiw Lenisaebi ek Jead alsa to Adpnel Gar 
: gv. bas ) = @ oumte 


“feo si tI ,bevougmi ed zedsqwt aso baued seqaqu elt 


ve 


\A9VEWOH , => + g oh bowed ssqqt jesal ede teds fexusset 
ieexg avoOtopix s sbivowqg ot slds aged jon asd soddue Sat 


soi Bilsv sxe ovods boviteb etivesz eT (2 *ibasggA) 


ajuqiti Yusmixg yino stenw ettowsea 10 ,ettewsen sex2<s00nst 
ati paeniieer to 9@55 [sisnép sanz. oa eat tee 
-bovizeb, ba ¥ @ 





HAL 


O1oO. oO 


oo a 


Figure 6.1 Network N6.1 
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Figure 6.2 Network N6.2 
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V2 
of checkpoints in subnetwork Nj LOL ime Ha, 2h ete pki, sand 
let Prax = max (Py pPorrs+1Py) The length of a minimal 
Single fault test set T for network N satisfies the 


following inequality 


2Vp 


S 
max &(T.)< eee 2(k-1) 


DOO hse Py is the number of checkpoints in 
subnetwork N., theniby theorem o6.leeat least 2 Vp, tests are 
needed to detect all single faults in N;. Since 
Pmax = Max (Dy rPor-++rPy)s & (To) must be greater than, or 
Simmelewivy eacemos it 4 Dy 


tests are required to detect all single faults in subnetwork 


can at best be equal to, aor ee 
N;- time nesOoutLpDUtLOL N; fans OUteCOnDLOVIde i nputce: On 
subnetwork Nay then at most S(p, + a Ie tests are needed 

to detect faults in both N; and A note that at least two 
faults in Ns must be detected by tests for faults in Ni, 
otherwise it would not be possible to propagate the effect 
oir See Mas wel N, through Be If N is a single output network 
that can be decomposed into k fanout-free subnetworks, then 
(k-1) subnetworks provide inputs for some other subnetwork. 


Hence &(T.) isszat most 3 p-2(k-1). 


To illustrate, the bounds for the network in E1G 0.5 
will be derived. This network has eight checkpoints and it 
can be decomposed into three fanout-free subnetworks, where 


Bis Pay Po = 2 and Panis 4, The lower bound is Zee = 4, 
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Figure 6.4 Network N6.4 
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the upper bound is 3.8 =a2.2 =98. The network in fig. 6.4 
has a minimal single fault test set of length four, and a 
minimal multiple fault test of length five, as was shown 
inechapters -20and %3. 

It should be pointed out that the lower bound is 
also a valid bound on the length of a minimal multiple fault 
test set Th! Since for any network A(T )2 R(T). Loeeis 
Mone +d1¢t 1cuLt to *prove’that &(T) satisfies also the 
upper bounds derived above. 

The structure of the network has a great influence 
on the length of a minimal test set. It was shown that the 
number of tests depends on the number of checkpoints in the 
network. Switching functions that are decomposable can be 
realized by a multiple level network with a smaller number 
of checkpoints than a two level realization corresponding 
to the minimal sum of products (or product of sums) form of 
the function. Furthermore, in such multiple level 
realizations a single test can be expected to detect a 
larger number of faults than a single test for the two 
level network. For example, the network inveig. O.4pcreal izes 
Chemctunction t= abe + abd + acd + bed. This network has 
twelve checkpoints and needs at least nine tests to detect 


all faults. The output function, however, can be decomposed 


in the following way 


4 


b.d .pil ni Axowesn SHT ~ 48 


= S26 = Bie 


€ 8b bavod soqqu edd 





6 Dis ,1v0o2 dtpasl Jo tes test afiuet slpate Iemtata 6 wae ct 
= 7 

nwors asw as .svit ddpael 20 jxed sipet siqtsivm Iamiaie “a 
i - 


ai bavod towol 


$fost 


.€ Bas § exetqsdo af 


sat tals tuo betnbeq ed Sivone 31 


siqigilum Ismiarm 5s to atpttel ste née Bawod Blisy 6 cals 


ai 31 ALPS <({ T}2 Atowssa yas tod soaia “mn jee test 


or ;502 Awore esw ; 782 
ont mi estitogdosrio to 
S 
a0 ABO Ssldseoqmocsb sxr6 stsA3 
tedmun zeilesma 6 dtiw Astowsed 


onibnogesyico moitesilézasx 


29 Mmz02 (amua Io tpuBorg x0) 
fevel sigitium dove 
& tosseb ot bstbeque ad 


Ow? Sit i602 tees solpnie 


eesilsey $.3 .pitt at x~towssn oiis ,SlaMsxs +0F% 


S60 AMoOwsen A2inT 


ac a 


a i 


— 


‘S 
» 


esitetsse ( TT) 
As ) 


‘ii Axowten sd 


-fod + bos * Big tao nosso 7 


tect svotq of Jluooit?ib szo0m. 
.svods beyiteb ebhbarod yegqu 


to stwiovise oT 


J293 Cesmict ton S&S to Ajpnel edd ao 


sdmun sd¢ to ebaaqeb ejaed to tsdaa 


enoijsonst prhidodiwe .asowten 


fevel siqitium s yd besilses 


{evel owt 5 asd? atnlogtosdo 36 


elouboxg. io sue Lemintm edd oF 


of ,stom@ieitrwt .noidoav® odd 
as2 teed elenie s enoltextises 
& tedt ative? to tedmun xopisl 





Nes) 

f = ab(c + d) + cd(a + b) 
denoting g = ab, h = cd, £ can be written as 

feegh + gh 
The realization in fig. 6.4 is based on this decomposition. 
The circuit has eight checkpoints and it needs only four 
and five tests for single and multiple fault detection, 
respectively. This compares favourably with the nine tests 
required for the two level network. Similarly, a two level 
AND-OR network realizing the function 

f = abcdeg + abcdeg + abcdeg + abcdeg 
hasvaiminimal single fault test set of length 28. A three 
level network utilizing the following decomposition 

f = (abc + abc) (deg + deg) 
needs only 14 tests. Hence, from the testing point of 
view, multiple level design based on decomposition of 
switching functions is highly desirable. It should be 
noted, however, that all functions are not decomposable. 
The problem of decomposition of switching functions is 


presented elsewhere ise eoile 





















a yi 
ait as 
(4 + B)bo + (B+ S)da = Quon ae | 
ne asdctiew ed aso 2 ,bo = 4) 4d@ = — pnigodes =) 

| Pe ee 
mois recqmovsb eit no beasd et b.3 -pit nt motissilises, off aa 


wot yino absen 21 Sas etniogdoshs adpis esd tivoxrio sdTt ; 
.noidpedeb jiust slgtsium bar sipaie 20? eteed evil Bas 
steot sim ort otiw vyidexwovs? eetseqmes einT. .vievidosgesn 
level ows s ,vixelimie .x+xowsan Level ows ent Yet Bezivped ; 
aoijonrt ed? snietlsex Anowsen AQ-GHA 
pebods + pabods + pS8eds + pabda = 3 
sound A 8h oi¢pnel to J62 Jead +Lwe® sipaie Iseninia & asd 
nottieoqmoosh pniwolfed os pabsiiise dsowiten Level 
(osb + psb) (Sda + ods) = 2 
to 3nilog piitess sit moi ,esnasi .<eageas $1 vine abeen 
lo mOitieogmoosh so beesd Aplash leyel elcizivua ,weiy 
ead SDisode J1 .sidsuteed vidpid af enoizony? paidosaue 
-sldsaeeqmessh jon sas eacoisons? Lis tedd ,xevewod. «bedon see 


al amoisonwt painstiwe te unbitecqmeseb ta waldoxrg od 
.{€8,6] stedweele besnswerg- 


(net 





116 


Chapter 7 
FAULT DIAGNOSIS 


When a fault is netecteds it is necessary to 
Hdentuty the faulty component so that it can be replaced . 
Fault diagnosis will be considered under the single fault 
assumption. The problem of fault diagnosis (or fault 
location) is to generate a test set such that the location 
of the fault can be determined from the response of the 
network. 

Because of the indistinguishability of certain 
faults, it is not always possible to uniquely specify which 
connection in the network is faulty. Two faults, fi and fo, 
are said to be distinguishable,if there exists a test 


that detects f, and does not detect fo) or vice versa. 


1 
Schertz [44] has shown how to combine indistinguishable 
faults into equivalence classes. In a fanout-free network 
where inputs can be assigned independently while testing, 


CwORtatlus,  Lamande. belong to the same equivalence class 


il om 
ieeondeonlyel ce tLheysdarernoE distinguishable. In [44] only 
the structure of the network has been considered when the 


equivalence classes has been derived; when the values of 


input variables cannot be assigned independently, there may 
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be indistinguishable faults that are not equivalent in 
the sense of [44]. For example, faults 1-1 and 4-1 in the 
network in fig. 7.1 do not belong to the same equivalence 
class. If the inputs are assigned as indicated in (a), 
then faults 1-1 and 4-1 are distinguishable; however if the 
inputs are assigned as in (b), then the two faults are not 
distinguishable. Since the input applied to checkpoint 1 
is not independent of the input applied to checkpoint 3 
(and input at 2 is not independent of the input at 4), the 
network in fig. 7.1 may not be considered as fanout-free. 
In the following section, it will be assumed that all inputs 


of a fanout-free network are accessible for testing. 


7.1 Fanout-free Networks 


It is difficult to derive a minimal diagnostic test 
set, unless all pairs of faults to be distinguished are 
considered. However, a nearly minimal diagnostic test set 
can be often derived with computational effort comparable to 


that required for fault detection. 


Lemma 7.1: Let N be a fanout-free network such that 
both its ESP forms are irredundant. If a test set T checks 
for the presence of all xX and all es terms, then T 
distinguishes between any two single faults that do not 


belong to the same equivalence class. 
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Figure 7.1 Network N71 
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Proof spe bothytheyEsP (he and ESP (£) forms are 
ior edundantys Chen (ili sapossiblelito ichecksforsthespresence 
of all X. and a terms and T will detect all single faults 


in Nee Wleanlyje any “wos faultsif cand fo) such that f 


ao 1 
causes some xX; to disappear while f. makes some of disappear, 
are distinguished, because such faults can never be detected 
by the same test. Now, suppose that fault fi causes the 
disappearance of terms Ky rXoreees x and that all these 
terms disappear due to fault ft. astwellito) l[f no other xX; 
term disappears due to for then fi and f., are equivalent 
because their effect upon the output function is the same. 
Otherwise there must be at least one Xs term that disappears 
due to ft, and does not disappear due to f,,and then T will 


contain at least one test that will distinguish fy from f.- 


A test set that checks for the presence of all X 
and Ys terms is not, in general, a minimal diagnostic test 
set; however, an optimal test set for fault diagnosis isa 
Subset OL suchzasiset. Sltlis}conjectured)that am forder 
to distinguish between any two distinguishable faults 
within a network, it is sufficient to distinguish between 
any two distinguishable faults on the checkpoints. A 
test that checks for the presence of some term detects faults 
on all checkpoints associated with that term. Therefore, 
the problem of generating an optimal diagnostic test set 


is equivalent to the problem of selecting a minimal set of 
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xX; and Le terms, such that for any two nonequivalent 
faults fi and fo, this set contains at least one term 
which disappears due to ft) and does not disappear due to 


f., or vice versa. This is illustrated by the following 


example. 


Mxanolem?. 2) A diagnostic test set will be derived TOU 
the network in fig. 7.2, where the checkpoints are enumerated 
1-7, while the remaining lines 8-12. The ESP FOrmseane 


ESP(f)) = a boc3 =f a,bod, + €.9¢ + eho 


a,es 1s a Fgh a bye of bog cho xP c,d ye, “e C2049 6h, 


We denote by A; the set of checkpoints associated with the 


BSP (EL) = 


term X.. 
a 
Thus A, soy (Io 2 73") 
A test set that checks for presence of x1 = reece detects 


faults 1-1,2-1 and 3-1. Because faults 1-1 and 2-1 are 
equivalent, we choose checkpoint 1 to represent this 
equivalence class. Then, ther Sets are 

A, = (eS) A, = (1,4) A, = (576) on = (Sa 
Denoting by Bs the set of checkpoints associated with the 
term a and choosing checkpoints 3 and 6 to represent the 


equivalence classes (3-0,4-0) and (6-0,7-0), respectively, 


the following B sets are obtained 


B (155 AB =) (7.0) BDA (272) B, = (2a oD) 


2 3 


By ir) Be = (376) 


It is now necessary to find a minimal set Sy of A sets such 
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that for any two checkpoints p and q, where p,q, € (ee 4 yoy. One Jer 
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Figure 7.2 Network N/7.2 
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TABLE 7.1 


Fault Dictionary for Network N7.2 






Pawlet 1 EQUIV ..c. ass Failing Test (s) 


1-0 
20 
(1-1,2-1,8-1,10-0) 
Asi 
ei 
(3-0,4-0,8-0) 
5-1 
(5-0,9-0,11-0) 
6-1 
71 
(6-0, 7-07; 9-1) 
(10-0,11=-1,12-1) 
2-0 
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Sa contains at least one A set that includes p but does 
not include g, or vice versa. It is easy to see that all 
four A sets must be chosen, i.e. 


Cretan 


A 7A 


21A37A4) 


However, only four B sets are sufficient and the set Sp is 


Spy yale eal 


A test set T that checks for the presence of corresponding 


Xs and % terms 1s 


ak (abcdegh, abcdegh, abcdegh, abcdegh, abcdegh, 


abcdegh, abcdegh, abcdegh) = 
= (ty rtor--- tg) 
Table 7.1 represents the fault dictionary for network 


N7.2 and the above test set. 


In fanout-free networks where AND and OR gates 
alternate, every single fault equivalence class spans at 
most one gate. Thus, every fault can bepidentiiied slo 
With ieca Dalia OL interconnections in the network. A method 
that finds such fault-locatable realizations was described 


by Friedman and Menon Lode 


7.2 Networks With Reconver ent Fanout 


Faults in circuits with reconvergent fanout cannot 
be located as closely as in fanout-free networks. Even if 
the inputs can be assigned independently while testing, 


there may be indistinghishable faults in the same fanout-free 
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subnetwork, as well as indistinguishable faults in two 
different fanout-free subnetworks., For example, in the 
network in fig. 7.3 faults 1-1 and 4-1 are indistinguishable 
andscomarcetaults 2-0) (org3-0-or, 7-0) and) 10-0. 

Currently available methods for fault diagnosis 
[7,9] usually assume that a complete or a partial fault 
table is given, and they use this table to select the 
diagnostic test set. Thus, considerable effort is needed 
Combualdathes faults table and addivtionalserforbh is required 
to select the test set. A method for deriving an optimal 
test set for diagnosis without constructing the fault table 
of the circuit will now be described. 

Let us denote by £(f£_) the function realized by 
the circuit in the presence of the fault f.: The set 
D(f.,fh)5 Otvalletests that distinguish between faults f. 
and fu is 

BIGE ei) =f tetean Meade, |) Ga metue ol alba 

The function f(f_) Can be easily obtained from the ESP (f) 
form of the network. The effect of faults upon the terms 
of the ESP forms has been established in chapter 2, and the 
following is a brief summary of how a s-0 or s-l fault on 
checkpoint p of a normal network influences term eis ct 

Ie In the presence of the fault p-1 


term a q al changes to 1.W = W 
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Figure 7.3 Network N7.3 
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2.) vl Che’ presencesof ithesiawltnp-0 


x = s 
erm ae changes to 0.W 


term ae tat changes to 0.W = 0 


Similarly, faults q-l and q-0 have the same effect as 


II 
1H 
= 
II 
= 


faults p-l and p-0, respectively, provided that the 
inversion parity between p and gq is even, and the opposite 
effect when the inversion parity is. odd. Thus, the function 
£(p-1) or £f(p-0) is obtained from the ESP(f) form by 
applying the rules above to every literal that is associated 
with checkpoint p, removing all subscribts, and using all 
the Boolean identities to simplify the resulting expression. 
To generate a diagnostic test set by considering all 
pairs of faults on checkpoints would require a large amount 
of computation. Because a complete test set for fault 
diagnosis has to detect all faults, it is reasonable to 
expect that a test set for fault detection is a subset of 
an optimal diagnostic test set. Assuming thatja single or 
muLtiplestault jcest Ty has been derived, the following 
procedure generates a test set Tos such that (Tj u T.) is an 


optimal test set for fault location. 


Procedure 7.1: 
1. From the checkpoint covering table, find the 
Set orvall fault pairs (f£.,fh)6 such that faults f. and fy 
are not distinguished by T,- When forming these pairs, 


select one fault to represent each class of equivalent faults. 
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2 
2. Use ESP(f£) or ESP(f), depending on which has a 


smaller number of terms, to evaluate f(f.) or ae) in the 
manner described above (step 3 assumes ESP(f) used). 
3. For every pair (f.-f)) compute 
D(f_,f,) = £(f,)@£(f,) 
4. Test set T, is any covering, preferably minimal, 


Obsell the D(f_,f)) terms computed in step 3. 


It should be noted that if D(f£_,£,) =—HeLOLesone 


f. and fur then faults f. and fh are not distinguishable. 


TABLE 7.2 


Test Set Ty for Network N7.4 





Example 7.2: Test set T, (see Table 7.2) is a minimal 
test set which detects all faults in the network N7.4. 
Choosing faults 3-0,4-0, and 5-0 to represent the equivalence 
classes (3-0,2-1), (4-0,7-0) and (5-0,6-0), respectively, 
it can be observed from table 7.2 that the following fault 


pairs are not distinguished by Ty: (3-0,8-0), (1-1,4-0), 


2issisb doinw sea 2 
" i Z 
eviune sit 3: od 
heed a 


De 


a inwitaegen: ro Nie S Oieiel 
— 7 7 





Ley are) 





Figure 7.4 Network N7.4 
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(4-1,3-0), (4-1,8-0) and (7-1,5-0). The ESP(f) form of 
this network is 


= = = = 


oy Ka - ped + qd. + 


eee ip Soe 4 Peta 1 Gaeeoy 


dy Ge ie Cen dame ia 


I Ae 2s] ee). 


For the pair (3-0,8-0) 
£(3-0) = ab + 0 + abc + ab + acd + ad = 
= ab + ab + ad 
When evaluating £(8-0), note that the inversion parity 
between 3 and 8 is even, whereas between 2 and 8, or 1 and 


OF ae Gand SmeOUC. 


£(8-0) = ab+bedt+bt+btdtd= 
=a+b+dte 
D(3-0,8-0) = (ab '+ ab + ad)@(a+b+¢+d+c) = 


ab + abcd 


In the same way it is found that 


D(1-1,4-0) = ad + bed + abc 
D(4-1,3-0) = ab + abcd + abcd 
D(4-1,8-0) = ¢ 

D(7-1,5-0) = ¢ 


Hence the fault 4-1 is not distinguishable from fault 8-0, 
and 7-1 is not distinguishable from 5-0. Each of the tests 
abcd, abc oT abd covers all the nonzero terms. Choosing 

T. = abcd, the resulting test set is 


uT. = (abcd, abcd, abcd, abcd, abcd, abcd, abcd) = 
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TABLE 7.3 


Fault Dictionary for Network N7.4 


Fault in Equiv.) Class 


Juco: 
Z2=0 
Sak 


Failing Test (s) 
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Test abcd checks for the presence of the term Xo = b C5745 - 
This term disappears due to the following single faults: 
4-0,2-1,3-0 and 7-0, Network N7.4 is not a network with 
EIP, but since no Xe termecaneqrow Guerto lallt.2-lyor = 3-1 
into X} such that abcd ¢€ Xi, test abcd detects all the single 
Eaulteranpove.) From this fact and from Table 7.2, the fault 


Gucelonany ine lable 7.581S constructed. 


With modern LSI technology the degree of diagnostic 
resolution required is usually determined by the smallest 
replacable modules of the system. Hence, there is no need 
to distinguish any two faults that belong to the same 
module and the diagnostic test set would be generated by 
considering only those fault pairs (f£,/f))5 where fault ft. 


and fault fy are faults in two different modules. 
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Chapter 8 
CONCLUSIONS 


The methods developed in this thesis derive the 
test set by checking for growth and/or presence of the 
terms in the ESP form(s) of the network. The ESP form 
describes the function realised by the network while 
preserving the important structural properties. It is for 
these reasons the ESP form is appropriate for test 
generation. A brief summary of the advantages of the 
approach taken herein is now presented, together with a 
discussion of the disadvantages, and suggestions for ways 
of circumventing them. It appears that the Main advantages 
are as follows: 

1. Single fault detection. The test set generated 
bysorocedure 2. lgon 5.1 18 minimal. The computational effort 
required by procedure 5.1 compares very favourably with 
almost any other method. 

2. Multiple fault detection. It sie amas, elekshic (ES 
ESP form is able to solve the multiple fault problem more 
easily than the other methods, such as those based on path 
sensitizing. The results in section 3.1 provide an insight 


into conditions under which fault masking occurs and the 
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results are also used to obtain minimal multiple fault 
test set (procedure 3.3). For most practical purposes it 
may be preferable to derive a nearly minimal test by 
utilizing the result of theorem 3.3, or theorem 3.4, since 


the computational effort is considerably smaller. 


When a single fault test set is derived for networks 
with unequal inversion parity of all reconverging paths, 
both the ESP(f) and ESP(f£) forms are employed by procedure 
2.1. However, the number of terms in at least one of the 
two forms may be large for some networks. A test set £Or 
such networks can be also derived by checking for the presence 
and growth of only xX; (Ore on Ly ta) terms, provided that it 
is ensured that reconvergent fanout cancellation does not 
Occur. 

If the ESP form is redundant, it may not be possible 
to check for presence of every term. If this is the case, 
it is suggested to extend procedure 5.1 in the following way 
(assume ESP(f) is used): 

- generate tests that check for growth of all xX; 
terms, and tests that check for presence of every term xy such 
that Cen xX, # go. 

- if a fault(s) is not detected by the tests generated 
above, find a pair, or triple, etc..., Ot teritsmcilavwall 
disappear due to this fault and generate a test that checks 


for presence of such a pair, or triple, etc., of terms. 
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Theorem 3.3 is very useful when only one of the 
two ESP forms is used and a multiple fault test set is to 
be derived. However, this theorem cannot be applied when 
it is not possible to strongly check for growth of all 
terms. A valuable extension of this work would be to prove 
that the theorem also holds for the more general case of 
the weak check. 

The problem of checking experiments for sequential 
machines has not been considered in this thesis. Although 
a number of methods for generating such testing sequences 
have been described [16,19,22,26,46], no satisfactory 
solutions are available. This topic is also worthy of 


further research. 
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APPENDIX A 
VALIDITY OF PROCEDURE 3.1 


i Procedure 3.1 finds the multiple faults that are 

not detected by a single fault test set Ts by utilizing the 
resulteoem Tneorem S.2..)lt was shown in the proof of this 
theorem, that if a test t detects fault fy ANGesthi Setaul ters 
masked, then there exists a term Vy (or Xe) which grows into 
Yo (65 Xp) and t ¢€ YO (Olu tc Xp). Procedure 3.1 constructs 
the intersection P = XX, .£.T. (or ¥i.¥,.£.T.), although 
it has not been proved that t ¢« are (Or we Xp-Xo). 

In a fanout-free network every variable is associated 
with only one checkpoint. Therefore, 1f a term disappears 


dvemcomrault: ft ifecannotagnow due toe fault ft. when fy is 


Te 
present. Consequently, t € LAE (orstee Xp +X) holds for 
fanout-free networks. 

For networks with internal fanout a term which 
disappears due to fault fi may grow due to fault f. when 
€,,f,) occurs. lf this is athe case, then fi and f., are 
faults in two different fanout-free subnetworks, say 
subnetwork Ny and No, such that the output of Ny fans out 


to provide inputs for N.- Suppose that fault f, makes 


the term Lae = UW disappear by making some tee rcilyaed, ens, 
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become zero and that fy is detected by test ty € Yue lige 


vy grows into Xo ="Widue to fault £ then £., masks f 


20 2 1 
under tis but ty g Ne We shall now show that procedure 
3.1 does not miss any undetected multiple faults for the 


following reasons: 


thoy (Pe youll fi is not equivalent to a fault on the 
output of subnetwork N,- Then there will be at least one 
additional 5 term, say term Mog where ey = VW and U.V = Gr 


and such that ay grows due to f, into , =e elit Yu is not 


Z 


checked for growth due to ft, by Ter then A is not either, 


and procedure 3.1 will not miss this masking relation since 


Cone eC Y beso, 
i Yaa. 


Zee tre! Ue ti is equivalent to a fault on the output 


of subnetwork N,- Hence it is equivalent to a multiple 


eee” WE Eyre+-rf,) on inputs of Nj. Two possibilities can 


2 
OCCUL : 


(a) Faults f,-f reser ty do not make term Yo 
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disappear. Then test set T will contain at least one 


aAddutionaletestmeaat aetects faults if. 7£ 


3H grecsrtye and also 
tii hence f. will not mask fi under To: 
(b) Faults f./f4,---,f, are detected by the same 


test as f i.e. by ti: Then they cause term Yo = UW 


1! 
to disappear by making some literal in W zero and Yy 

cannot grow due to fo: Therefore fi will not be masked. 
ThuSstiEeisesutbicientwtosconstruct, the intersecrion 
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APPENDIX B 
UPPER BOUND ON d(T.) FOR ILFF NETWORKS 


A single fault test set Ts for an ILFF network 


with p checkpoints must detect 2p faults, denoted fi, 
v 


i] 
GC ORAS ES Let r tests detect faults 


SGP’ yee Shanks by checking for the presence of r X; terms 


q 
£,/f,,/f,,f 


Xi Xoreees xX Then at most p tests will be needed to 


detect faults i aecoccuee and this will happen when all 
terms are a distance 3 apart. The distance between two 
terms X) and X5 is the number of literals that appear in 
x) as well as X 


in Xj and not complemented in Xor Oravicerversa. lionwis 


2" such that the appearance is complemented 


the number of different literals in the ESP(f) form, then 


[34] 


ae gn-log ntl 


(bo 1) 
It is now conjectured that 


nag, ates, 4o) 


iealiethermterms are tO beva distance s37apaxnc. 
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